@amaster.ai/employee-runtime-connector 0.1.0-beta.29 → 0.1.0-beta.30

package/dist/amaster-runtime-daemon.mjs

@@ -4750,7 +4750,7 @@ function readWorkspaceStatus(cwd, opts = {}) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.0-beta.29";
+var CONNECTOR_VERSION = "0.1.0-beta.30";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -5178,6 +5178,7 @@ function buildHeartbeatPayload(config, options = {}) {
   }
   const activeRunCommandList = Array.from(activeRunCommandById.values()).map((entry) => buildActiveRunCommandStatus(config, entry));
   const executorReadiness = buildExecutorReadiness(config);
+  const platformCredential = piAgentLocalPlatformCredentialStatus(config);
   return {
     status: "online",
     workspaceBindings: config.workspaceBindings,
@@ -5202,6 +5203,7 @@ function buildHeartbeatPayload(config, options = {}) {
       ...Object.keys(orphanReaperSummary).length > 0 ? { orphanReaper: orphanReaperSummary } : {},
       stateFile: stateFilePath(process.env),
       ...executorReadiness.length > 0 ? { executorReadiness } : {},
+      ...platformCredential ? { platformCredential } : {},
       ...versionDrift.versionDrift || versionDrift.bundleDrift ? versionDrift : {}
     },
     metadata: {
@@ -5209,6 +5211,56 @@ function buildHeartbeatPayload(config, options = {}) {
     }
   };
 }
+var PI_AGENT_LOCAL_PLATFORM_RUNNER_MODE = "local_platform";
+function piAgentLocalPlatformRunnerEnabled(config) {
+  return readString(config.AMASTER_PI_AGENT_RUNNER_MODE ?? process.env.AMASTER_PI_AGENT_RUNNER_MODE) === PI_AGENT_LOCAL_PLATFORM_RUNNER_MODE;
+}
+function piAgentSystemDataDir(config) {
+  const configured = readString(config.AMASTER_PI_AGENT_SYSTEM_DATA_DIR ?? process.env.AMASTER_PI_AGENT_SYSTEM_DATA_DIR);
+  return configured ? resolve8(expandHomePath(configured)) : null;
+}
+function readPiAgentLocalPlatformCredential(credentialsDir) {
+  const pointer = readJsonFile(join10(credentialsDir, "latest.json"));
+  const credentialRef = readString(pointer.credentialRef);
+  if (!credentialRef || !/^[a-f0-9]{64}$/i.test(credentialRef)) return null;
+  const credential = readJsonFile(join10(credentialsDir, `${credentialRef}.json`));
+  const organizationId = readString(credential.organizationId);
+  const apiKey = readString(credential.apiKey);
+  if (credential.version !== 1 || !organizationId || !apiKey) return null;
+  return {
+    organizationId,
+    apiKey,
+    ...readString(credential.baseUrl) ? { baseUrl: readString(credential.baseUrl) } : {},
+    ...readString(credential.defaultModel) ? { defaultModel: readString(credential.defaultModel) } : {},
+    ...readString(credential.flashModel) ? { flashModel: readString(credential.flashModel) } : {}
+  };
+}
+function piAgentLocalPlatformCredentials(config) {
+  if (!piAgentLocalPlatformRunnerEnabled(config)) return [];
+  const systemDataDir = piAgentSystemDataDir(config);
+  if (!systemDataDir) return [];
+  const companiesDir = join10(systemDataDir, "companies");
+  let entries = [];
+  try {
+    entries = readdirSync6(companiesDir, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const credentialsByOrganizationId = /* @__PURE__ */ new Map();
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const credential = readPiAgentLocalPlatformCredential(join10(companiesDir, entry.name, "model-credentials"));
+    if (credential) credentialsByOrganizationId.set(credential.organizationId, credential);
+  }
+  return [...credentialsByOrganizationId.values()];
+}
+function piAgentLocalPlatformCredentialStatus(config) {
+  if (!piAgentLocalPlatformRunnerEnabled(config)) return null;
+  return {
+    mode: PI_AGENT_LOCAL_PLATFORM_RUNNER_MODE,
+    readyOrganizationIds: piAgentLocalPlatformCredentials(config).map((credential) => credential.organizationId).sort()
+  };
+}
 function writeLocalRuntimeStatus(config, runtimeStatus) {
   const currentState = readState(process.env);
   writeState(process.env, {
@@ -5872,20 +5924,42 @@ function syncAmasterProviderSettings(agentDir, executorEnv) {
   return true;
 }
 async function preparePiExecutorProviderConfig(config, command, executorEnv) {
-  const agentDir = readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
+  const hasGovernedMcp = Object.keys(asRecord(commandRuntimeAuth(command).governedMcp)).length > 0;
+  const agentDir = piAgentLocalPlatformRunnerEnabled(config) || hasGovernedMcp ? readString(executorEnv.PI_AGENT_HOME) ?? readString(executorEnv.PI_CODING_AGENT_DIR) : readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
   if (!agentDir) return;
-  const modelsSynced = syncAmasterProviderModels(agentDir, executorEnv);
-  const settingsSynced = syncAmasterProviderSettings(agentDir, executorEnv);
+  const localPlatformCredential = piAgentLocalPlatformCredentialForCommand(config, command);
+  if (piAgentLocalPlatformRunnerEnabled(config) && !localPlatformCredential) {
+    throw new Error("Pi Agent local Platform credential is unavailable for this command organization");
+  }
+  const providerConfig = localPlatformCredential ?? executorEnv;
+  const modelsSynced = syncAmasterProviderModels(agentDir, providerConfig);
+  const settingsSynced = syncAmasterProviderSettings(agentDir, providerConfig);
   if (modelsSynced || settingsSynced) {
     await ingestLog(config, command, "system", "info", "Synced AMaster provider config for pi executor", {
       modelsSynced,
       settingsSynced,
-      providerBaseUrlConfigured: Boolean(readString(executorEnv.AMASTER_PROVIDER_BASE_URL)),
-      defaultModelConfigured: Boolean(readString(executorEnv.AMASTER_PROVIDER_DEFAULT_MODEL)),
-      flashModelConfigured: Boolean(readString(executorEnv.AMASTER_PROVIDER_FLASH_MODEL))
+      credentialSource: localPlatformCredential ? "pi_agent_local_platform" : "command_executor_env",
+      providerBaseUrlConfigured: Boolean(readString(providerConfig.AMASTER_PROVIDER_BASE_URL)),
+      defaultModelConfigured: Boolean(readString(providerConfig.AMASTER_PROVIDER_DEFAULT_MODEL)),
+      flashModelConfigured: Boolean(readString(providerConfig.AMASTER_PROVIDER_FLASH_MODEL))
     });
   }
 }
+function piAgentLocalPlatformCredentialForCommand(config, command) {
+  if (!piAgentLocalPlatformRunnerEnabled(config)) return null;
+  const executionContext = asRecord(command.executionContext);
+  const runtimeExecutionContext = asRecord(asRecord(command.runtimeAuth).executionContext);
+  const organizationId = readString(executionContext.platformOrganizationId) ?? readString(runtimeExecutionContext.platformOrganizationId);
+  if (!organizationId) return null;
+  const credential = piAgentLocalPlatformCredentials(config).find((entry) => entry.organizationId === organizationId);
+  if (!credential) return null;
+  return {
+    AMASTER_API_KEY: credential.apiKey,
+    ...credential.baseUrl ? { AMASTER_PROVIDER_BASE_URL: credential.baseUrl } : {},
+    ...credential.defaultModel ? { AMASTER_PROVIDER_DEFAULT_MODEL: credential.defaultModel } : {},
+    ...credential.flashModel ? { AMASTER_PROVIDER_FLASH_MODEL: credential.flashModel } : {}
+  };
+}
 function normalizeWorkspaceContext(workspace) {
   if (typeof workspace === "string") {
     return {
@@ -6012,6 +6086,9 @@ function companyPiAgentHome(baseEnv, companyId) {
   if (!segment) return null;
   return join10(companyPiHomeRoot(baseEnv), segment, ".pi");
 }
+function commandUsesPiExecutor(command) {
+  return readString(asRecord(command.payload).executorKind) === "pi";
+}
 function buildExecutorEnv(config, command, workspace) {
   const workspaceContext = normalizeWorkspaceContext(workspace);
   const cwd = workspaceContext.cwd;
@@ -6021,6 +6098,7 @@ function buildExecutorEnv(config, command, workspace) {
   const companyId = readString(runtimeAuth.companyId) ?? readString(asRecord(command.payload).companyId) ?? "";
   const baseEnv = { ...process.env };
   const piAgentHome = companyPiAgentHome(baseEnv, companyId);
+  const hasGovernedMcp = Object.keys(asRecord(runtimeAuth.governedMcp)).length > 0;
   const executorPaths = readStringArray(config.executorPaths);
   if (executorPaths.length > 0) {
     baseEnv.PATH = [...executorPaths, baseEnv.PATH ?? ""].filter(Boolean).join(delimiter2);
@@ -6029,6 +6107,10 @@ function buildExecutorEnv(config, command, workspace) {
     ...baseEnv,
     ...commandExecutorEnv(command),
     ...piAgentHome ? { PI_AGENT_HOME: piAgentHome } : {},
+    ...piAgentHome && commandUsesPiExecutor(command) && !piAgentLocalPlatformRunnerEnabled(config) && !hasGovernedMcp ? {
+      PI_CODING_AGENT_DIR: piAgentHome,
+      "AMASTER-CLI_CODING_AGENT_DIR": piAgentHome
+    } : {},
     AMASTER_RUNTIME_COMMAND_ID: command.commandId,
     AMASTER_RUNTIME_RUN_ID: runId,
     AMASTER_RUNTIME_ISSUE_ID: issueId,
@@ -7847,6 +7929,12 @@ async function executeRunCommand(config, command) {
     cleanupManagedMcpProfile = cleanupManagedCodexMcpProfile;
   }
   if (executor.kind === "pi") {
+    if (piAgentLocalPlatformRunnerEnabled(config)) {
+      delete executorEnv.AMASTER_API_KEY;
+      delete executorEnv.AMASTER_PROVIDER_BASE_URL;
+      delete executorEnv.AMASTER_PROVIDER_DEFAULT_MODEL;
+      delete executorEnv.AMASTER_PROVIDER_FLASH_MODEL;
+    }
     await preparePiExecutorProviderConfig(config, command, executorEnv);
     if (Object.keys(governedMcp).length > 0) {
       managedMcpProfile = prepareManagedPiMcpProfile({

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.0-beta.29";
+const CONNECTOR_VERSION = "0.1.0-beta.30";
 
 const CAPABILITIES = [
   "remote_registration",
@@ -52,6 +52,8 @@ const CONFIG_KEY_MAP = new Map([
   ["pi_coding_agent_dir", "PI_CODING_AGENT_DIR"],
   ["pi_agent_home", "PI_AGENT_HOME"],
   ["pi_agent_node", "PI_AGENT_NODE"],
+  ["pi_agent_runner_mode", "AMASTER_PI_AGENT_RUNNER_MODE"],
+  ["pi_agent_system_data_dir", "AMASTER_PI_AGENT_SYSTEM_DATA_DIR"],
   ["heartbeat_log_mode", "AMASTER_HEARTBEAT_LOG_MODE"],
 ]);
 
@@ -79,6 +81,8 @@ const ENV_ORDER = [
   "PI_CODING_AGENT_DIR",
   "PI_AGENT_HOME",
   "PI_AGENT_NODE",
+  "AMASTER_PI_AGENT_RUNNER_MODE",
+  "AMASTER_PI_AGENT_SYSTEM_DATA_DIR",
   "AMASTER_HEARTBEAT_LOG_MODE",
 ];
 
@@ -400,6 +404,8 @@ function printConfig(config) {
     ["pi_coding_agent_dir", merged.PI_CODING_AGENT_DIR || "(default)"],
     ["pi_agent_home", merged.PI_AGENT_HOME || "(default)"],
     ["pi_agent_node", merged.PI_AGENT_NODE || "(default)"],
+    ["pi_agent_runner_mode", merged.AMASTER_PI_AGENT_RUNNER_MODE || "(disabled)"],
+    ["pi_agent_system_data_dir", merged.AMASTER_PI_AGENT_SYSTEM_DATA_DIR ? "(configured)" : "(not configured)"],
     ["heartbeat_log_mode", merged.AMASTER_HEARTBEAT_LOG_MODE || "(compact)"],
     ["network_domains", merged.AMASTER_NETWORK_DOMAINS],
     ["capabilities", merged.AMASTER_CAPABILITIES],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.0-beta.29",
+  "version": "0.1.0-beta.30",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",