@amaster.ai/employee-runtime-connector 0.1.0-beta.30 → 0.1.0-beta.31

package/dist/amaster-runtime-daemon.mjs

@@ -4750,7 +4750,7 @@ function readWorkspaceStatus(cwd, opts = {}) {
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.0-beta.30";
+var CONNECTOR_VERSION = "0.1.0-beta.31";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var MAX_CHECKPOINT_BYTES = 20 * 1024 * 1024;
 var CHECKPOINT_TTL_MS = 24 * 60 * 60 * 1e3;
@@ -5923,22 +5923,26 @@ function syncAmasterProviderSettings(agentDir, executorEnv) {
   writeJsonFileAtomic(settingsPath, settings);
   return true;
 }
-async function preparePiExecutorProviderConfig(config, command, executorEnv) {
-  const hasGovernedMcp = Object.keys(asRecord(commandRuntimeAuth(command).governedMcp)).length > 0;
-  const agentDir = piAgentLocalPlatformRunnerEnabled(config) || hasGovernedMcp ? readString(executorEnv.PI_AGENT_HOME) ?? readString(executorEnv.PI_CODING_AGENT_DIR) : readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
-  if (!agentDir) return;
+function resolvePiExecutorProviderConfig(config, command, executorEnv) {
   const localPlatformCredential = piAgentLocalPlatformCredentialForCommand(config, command);
   if (piAgentLocalPlatformRunnerEnabled(config) && !localPlatformCredential) {
     throw new Error("Pi Agent local Platform credential is unavailable for this command organization");
   }
-  const providerConfig = localPlatformCredential ?? executorEnv;
+  return {
+    providerConfig: localPlatformCredential ?? executorEnv,
+    credentialSource: localPlatformCredential ? "pi_agent_local_platform" : "command_executor_env"
+  };
+}
+async function syncPiExecutorProviderConfig(config, command, agentDir, resolvedProviderConfig) {
+  if (!agentDir) return;
+  const { providerConfig, credentialSource } = resolvedProviderConfig;
   const modelsSynced = syncAmasterProviderModels(agentDir, providerConfig);
   const settingsSynced = syncAmasterProviderSettings(agentDir, providerConfig);
   if (modelsSynced || settingsSynced) {
     await ingestLog(config, command, "system", "info", "Synced AMaster provider config for pi executor", {
       modelsSynced,
       settingsSynced,
-      credentialSource: localPlatformCredential ? "pi_agent_local_platform" : "command_executor_env",
+      credentialSource,
       providerBaseUrlConfigured: Boolean(readString(providerConfig.AMASTER_PROVIDER_BASE_URL)),
       defaultModelConfigured: Boolean(readString(providerConfig.AMASTER_PROVIDER_DEFAULT_MODEL)),
       flashModelConfigured: Boolean(readString(providerConfig.AMASTER_PROVIDER_FLASH_MODEL))
@@ -7935,7 +7939,7 @@ async function executeRunCommand(config, command) {
       delete executorEnv.AMASTER_PROVIDER_DEFAULT_MODEL;
       delete executorEnv.AMASTER_PROVIDER_FLASH_MODEL;
     }
-    await preparePiExecutorProviderConfig(config, command, executorEnv);
+    const resolvedProviderConfig = resolvePiExecutorProviderConfig(config, command, executorEnv);
     if (Object.keys(governedMcp).length > 0) {
       managedMcpProfile = prepareManagedPiMcpProfile({
         commandId: command.commandId,
@@ -7952,6 +7956,28 @@ async function executeRunCommand(config, command) {
         extraArgs: splitExtraArgs(process.env.AMASTER_PI_EXTRA_ARGS)
       });
       cleanupManagedMcpProfile = cleanupManagedPiMcpProfile;
+      try {
+        await syncPiExecutorProviderConfig(
+          config,
+          command,
+          readString(managedMcpProfile.env.PI_CODING_AGENT_DIR) ?? readString(managedMcpProfile.env.PI_AGENT_HOME) ?? null,
+          resolvedProviderConfig
+        );
+        const providerCredential = readString(resolvedProviderConfig.providerConfig.AMASTER_API_KEY);
+        if (providerCredential && !managedMcpProfile.protectedValues.includes(providerCredential)) {
+          managedMcpProfile.protectedValues.push(providerCredential);
+        }
+      } catch (error) {
+        cleanupManagedMcpProfile(managedMcpProfile, {
+          commandId: command.commandId,
+          runId: commandRunId(command)
+        });
+        managedMcpProfile = null;
+        throw error;
+      }
+    } else {
+      const agentDir = piAgentLocalPlatformRunnerEnabled(config) ? readString(executorEnv.PI_AGENT_HOME) ?? readString(executorEnv.PI_CODING_AGENT_DIR) ?? null : readString(executorEnv.PI_CODING_AGENT_DIR) ?? readString(executorEnv.PI_AGENT_HOME) ?? null;
+      await syncPiExecutorProviderConfig(config, command, agentDir, resolvedProviderConfig);
     }
   }
   if (managedMcpProfile) {

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.0-beta.30";
+const CONNECTOR_VERSION = "0.1.0-beta.31";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.0-beta.30",
+  "version": "0.1.0-beta.31",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",