amsd-pipeline-shared 0.5.26 → 0.5.28

package/orchestrations/scripts/lib/doctor/classify.js

@@ -23,12 +23,20 @@ function signaturesFor(runtime, injected) {
     internalFrame: rxOf(s.internalFrame), dependencyDir: s.dependencyDir };
 }
 
-function classify({ profile, portRoot, res, crash, aborted, since, signatures, evidence }) {
+function classify({ profile, portRoot, res, crash, aborted, since, signatures, evidence, runDir }) {
   const sig = signaturesFor(profile.classify.runtime, signatures);
   const takesMost = profile.classify.policy === 'all-but-refusals';
   // WHAT IS EXTERNAL: the machine, the network, the model service, a kill. Under "all-but-refusals" a kill that happened inside the pipeline's OWN memory budget (the bounded wrapper's start banner is in the text:
   // the cap the pipeline chose, so what ran inside it is the pipeline's to bound — run 11, jest workers inside a Writer session's cap) is not external
-  const isExternal = (text) => sig.external.test(text) && !(takesMost && sig.ownBudget.test(text));
+  // An access error on the leg's OWN run folder is the code's too (live run 13, 2026-10-22: the driver copied a locked set into the run's
+  // project copy and could not clear it — "EACCES … rmdir '<run>/project/…'"): every path the message quotes is inside runDir
+  const ownRunPaths = (text) => {
+    if (!takesMost || !runDir || !/\bE(ACCES|PERM)\b/.test(text)) return false;
+    const paths = [...String(text).matchAll(/'(\/[^']+)'/g)].map((m) => path.resolve(m[1]));
+    const root = path.resolve(runDir);
+    return paths.length > 0 && paths.every((p) => p === root || p.startsWith(`${root}${path.sep}`));
+  };
+  const isExternal = (text) => sig.external.test(text) && !(takesMost && sig.ownBudget.test(text)) && !ownRunPaths(text);
   if (!res || typeof res !== 'object') return no('no-result', 'the leg gave no result');
   if (aborted) return no('aborted', 'the operator or a watcher ended the leg');
   // AN AGENT-CAUSED ABORT (operator, 2026-10-20: look for the agentic solution first): a failed leg whose reason is one of the pipeline's own agent-caused
@@ -69,7 +77,10 @@ function classify({ profile, portRoot, res, crash, aborted, since, signatures, e
   if (isExternal(text)) return no('external', 'the failure names the machine, the network, the model service or a kill — not the code');
   if (sig.generalRefusal.test(text) || profile.classify.refusals.some((r) => r.test(text))) return no('refusal', 'the pipeline stopped on purpose');
   const site = (crash.frames || []).find((f) => f && typeof f.file === 'string' && !sig.internalFrame.test(f.file)) || null;
-  if (!site) return no('outside-port', 'no frame of the stack is in any file');
+  // under "all-but-refusals" a crash whose stack names no file (every frame the runtime's own — live run 13, node's rimraf) is still a failed
+  // leg the doctor takes; its agent finds the layer
+  if (!site) return takesMost ? { call: true, kind: 'crash', layer: 'undecided', why: `${crash.name}: ${String(crash.message).slice(0, 160)} — no frame of the stack is in a file${crash.step ? ` (step: ${crash.step})` : ''}` }
+    : no('outside-port', 'no frame of the stack is in any file');
   const rel = path.relative(portRoot || '', site.file);
   const parts = rel.split(path.sep);
   const inPort = !!portRoot && !rel.startsWith('..') && !path.isAbsolute(rel) && profile.scope.repairDirs.includes(parts[0]) && !parts.includes(sig.dependencyDir);

package/orchestrations/scripts/lib/doctor/crash-record.js

@@ -55,6 +55,9 @@ function die(e) {
 function install(opts) {
   if (!opts || !opts.runDir || !opts.file) throw new Error('crash record: install needs { runDir, file } — the file name is the pipeline\'s (profile crash.file), never a default');
   runDir = opts.runDir; fileName = opts.file;
+  // THE WHOLE STACK: V8 keeps ten frames, and a throw from deep inside a library (node's rimraf, live run 13) lost the frame of the code
+  // that called it — the one the doctor locates the defect by
+  Error.stackTraceLimit = Infinity;
   process.on('uncaughtException', die);
   process.on('unhandledRejection', (r) => die(r));
 }

package/orchestrations/scripts/lib/doctor/handle.js

@@ -33,7 +33,7 @@ async function handle(a) {
   // the logs are cumulative across legs: the decision reads only what follows the last leg-start line in each file (the whole tail when the profile names none or the tail holds none)
   const thisLeg = (text) => { if (!profile.logs.legStart) return text; const ls = text.split('\n'); let at = -1; ls.forEach((l, i) => { if (profile.logs.legStart.test(l)) at = i; }); return at < 0 ? text : ls.slice(at).join('\n'); };
   const evidence = profile.logs.evidence.map((f) => thisLeg(tail(path.join(runDir, f), profile.logs.evidenceTailLines))).join('\n');
-  const c = classify({ profile, portRoot, res, crash, aborted, since, evidence });
+  const c = classify({ profile, portRoot, res, crash, aborted, since, evidence, runDir });
   if (!c.call) { d.event('not-called', { kind: c.kind, why: c.why }); return { handled: false, kind: c.kind, why: c.why }; }
   d.event('trigger', { kind: c.kind, layer: c.layer, why: c.why, step: (crash && crash.step) || '' });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "amsd-pipeline-shared",
-  "version": "0.5.26",
+  "version": "0.5.28",
   "description": "The AMSD pipeline's shared components, one source for the bash pipeline and its Claude workflows: the model-call gateway (llm-handler.sh — retry, ladder, self-heal, cost) and the libraries it runs.",
   "license": "UNLICENSED",
   "bin": {