@amaster.ai/employee-runtime-connector 0.1.1-beta.11 → 0.1.1-beta.13

package/dist/amaster-runtime-daemon.mjs

@@ -3,7 +3,7 @@
 
 // src/amaster-runtime-daemon.mjs
 import { createHash as createHash13 } from "node:crypto";
-import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, mkdtempSync, readFileSync as readFileSync11, readdirSync as readdirSync9, realpathSync as realpathSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync7, symlinkSync as symlinkSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
+import { chmodSync as chmodSync6, copyFileSync as copyFileSync3, existsSync as existsSync14, lstatSync as lstatSync7, mkdirSync as mkdirSync9, mkdtempSync, readFileSync as readFileSync11, readdirSync as readdirSync9, realpathSync as realpathSync5, renameSync as renameSync6, rmSync as rmSync7, statSync as statSync8, symlinkSync as symlinkSync4, unlinkSync as unlinkSync2, writeFileSync as writeFileSync9 } from "node:fs";
 import { arch as arch3, homedir as homedir3, hostname as hostname2, platform as platform3, tmpdir } from "node:os";
 import { basename as basename6, delimiter as delimiter3, dirname as dirname9, extname as extname2, isAbsolute as isAbsolute8, join as join15, relative as relative9, resolve as resolve12 } from "node:path";
 import { spawn as spawn2, spawnSync as spawnSync6 } from "node:child_process";
@@ -3021,6 +3021,7 @@ function createManagedPiMcpProfileApi(options = {}) {
       throw new Error("pi_managed_mcp_source_acquisition_extension_missing");
     }
     copyPrivateFile(join4(source, "models.json"), join4(agentDir, "models.json"));
+    copyPrivateFile(join4(source, "SYSTEM.md"), join4(agentDir, "SYSTEM.md"));
     const authSource = join4(source, "auth.json");
     const protectedValues = [];
     if (copyPrivateFile(authSource, join4(agentDir, "auth.json"))) {
@@ -3035,6 +3036,33 @@ function createManagedPiMcpProfileApi(options = {}) {
     symlinkSync(npmSource, join4(agentDir, "npm"), "dir");
     return { adapterVersion, protectedValues };
   }
+  function seedDelegatedPiRuntime(sourceHome, agentDir) {
+    const source = resolve2(nonEmpty2(sourceHome, "sourcePiHome"));
+    const sourceStat = lstatSync2(source);
+    if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
+      throw new Error("pi_delegated_mcp_source_config_unsafe: Pi home");
+    }
+    const protectedValues = [];
+    for (const entry of readdirSync2(source, { withFileTypes: true })) {
+      if (entry.name === "mcp.json" || entry.name === "mcp-cache.json") continue;
+      const sourcePath = join4(source, entry.name);
+      const targetPath = join4(agentDir, entry.name);
+      if (entry.isDirectory()) {
+        symlinkSync(sourcePath, targetPath, platform2() === "win32" ? "junction" : "dir");
+      } else if (entry.isFile()) {
+        copyPrivateFile(sourcePath, targetPath);
+      }
+    }
+    const authSource = join4(source, "auth.json");
+    if (existsSync3(authSource)) {
+      try {
+        collectAuthSecretStrings2(JSON.parse(readFileSync3(authSource, "utf8")), protectedValues);
+      } catch {
+        throw new Error("pi_delegated_mcp_attestation_failed: source Pi auth is invalid");
+      }
+    }
+    return { protectedValues };
+  }
   function attestPi(executorCommand, env, configPath, expectedConfig) {
     const resolvedExecutorCommand = resolvePiExecutablePath(executorCommand, env);
     const executorIdentity = piExecutableIdentity(resolvedExecutorCommand);
@@ -3338,17 +3366,21 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     assertInvocationIsolation2(input);
     const { gateway, gatewayUrl, sessionToken, headers, runId, mcpToolMode, directCatalog } = validateAuthority2(input);
     const runDir = resolve2(nonEmpty2(input.runDir, "runDir"));
+    const cwd = resolve2(nonEmpty2(input.cwd, "cwd"));
+    if (!within4(cwd, runDir)) throw new Error("pi_delegated_mcp_owner_mismatch: cwd is outside the managed run");
+    assertNoProjectMcpOverride(cwd, runDir);
     const executorHome = resolve2(nonEmpty2(input.executorHome, "executorHome"));
     if (!within4(executorHome, join4(runDir, "executors"))) throw new Error("pi_delegated_mcp_owner_mismatch: executorHome is outside the managed run");
     const profileRoot = join4(executorHome, "delegated-mcp");
     if (existsSync3(profileRoot)) throw new Error(`pi_delegated_mcp_profile_exists: ${profileRoot}`);
+    const piCodingAgentDir = join4(profileRoot, "pi-coding-agent-dir");
     const sessionsRoot = join4(profileRoot, "sessions");
     const tmp = join4(profileRoot, "tmp");
-    for (const directory of [profileRoot, sessionsRoot, tmp]) mkdirSync3(directory, { recursive: true, mode: 448 });
+    for (const directory of [profileRoot, piCodingAgentDir, sessionsRoot, tmp]) mkdirSync3(directory, { recursive: true, mode: 448 });
     try {
       const markerPath = join4(profileRoot, DELEGATED_PROFILE_MARKER);
       const owner = Object.freeze({ commandId: input.commandId, runId });
-      writePrivateFile2(markerPath, `${JSON.stringify({ version: 1, ...owner, profileRoot })}
+      writePrivateFile2(markerPath, `${JSON.stringify({ version: 1, ...owner, profileRoot, piCodingAgentDir })}
 `);
       const runtimeAuth = record7(input.runtimeAuth);
       const authority = Object.freeze({
@@ -3363,8 +3395,9 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
         throw new Error("pi_delegated_mcp_source_config_unsafe: Pi home");
       }
+      const seededRuntime = seedDelegatedPiRuntime(sourcePiHome, piCodingAgentDir);
       const sourceMcp = readJsonObjectFile(join4(sourcePiHome, "mcp.json"));
-      const configPath = join4(profileRoot, "mcp.json");
+      const configPath = join4(piCodingAgentDir, "mcp.json");
       const directToolNames = directCatalog?.tools.map((tool) => tool.exposedName) ?? [];
       const serverConfig = {
         type: "http",
@@ -3389,6 +3422,9 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       const env = {
         ...input.baseEnv,
         ...record7(input.commandEnv),
+        PI_AGENT_HOME: sourcePiHome,
+        PI_CODING_AGENT_DIR: piCodingAgentDir,
+        "AMASTER-CLI_CODING_AGENT_DIR": piCodingAgentDir,
         PI_AGENT_MCP_SERVERS_FILE: configPath,
         PI_CODING_AGENT_SESSION_DIR: sessionsRoot,
         "AMASTER-CLI_CODING_AGENT_SESSION_DIR": sessionsRoot,
@@ -3410,6 +3446,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         runId,
         sessionId: gateway.sessionId,
         sourcePiHome,
+        piCodingAgentDir,
         configSha256: sha256(readFileSync3(configPath))
       };
       return {
@@ -3421,7 +3458,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         markerPath,
         env,
         toolAllowlist: null,
-        protectedValues: [sessionToken],
+        protectedValues: [.../* @__PURE__ */ new Set([sessionToken, ...seededRuntime.protectedValues])],
         attestation: {
           ...attestationFacts,
           attestationId: createHash3("sha256").update(JSON.stringify(attestationFacts)).digest("hex"),
@@ -7073,13 +7110,27 @@ function createRuntimeArtifactIngestQueue({ ingest, onError }) {
 
 // src/amaster-runtime-daemon/workspace-guard.mjs
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync7, mkdirSync as mkdirSync6, realpathSync as realpathSync4, statSync as statSync3 } from "node:fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync6, realpathSync as realpathSync4, statSync as statSync4 } from "node:fs";
 import { basename as basename4, join as join8, isAbsolute as isAbsolute4, relative as relative4, resolve as resolve4 } from "node:path";
 
 // src/amaster-runtime-daemon/workspace-manifest.mjs
-import { existsSync as existsSync6, readFileSync as readFileSync7, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "node:fs";
+import { chownSync, existsSync as existsSync6, readFileSync as readFileSync7, renameSync as renameSync4, rmSync as rmSync4, statSync as statSync3, writeFileSync as writeFileSync6 } from "node:fs";
 import { basename as basename3, dirname as dirname5, join as join7 } from "node:path";
 var WORKSPACE_MANIFEST_FILENAME = ".amaster-runtime.json";
+function syncManifestDirOwnership(manifestPath, deps = {}) {
+  const stat = deps.statSync ?? statSync3;
+  const chown = deps.chownSync ?? chownSync;
+  const geteuid = deps.geteuid ?? (typeof process.geteuid === "function" ? process.geteuid.bind(process) : () => null);
+  try {
+    if (geteuid() !== 0) return false;
+    const dirStat = stat(dirname5(manifestPath));
+    if (dirStat.uid === 0 && dirStat.gid === 0) return false;
+    chown(manifestPath, dirStat.uid, dirStat.gid);
+    return true;
+  } catch {
+    return false;
+  }
+}
 function nowIso() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
@@ -7098,7 +7149,7 @@ function readWorkspaceManifest(manifestPath) {
     return null;
   }
 }
-function writeWorkspaceManifest(manifestPath, manifest) {
+function writeWorkspaceManifest(manifestPath, manifest, deps) {
   const tempPath = join7(
     dirname5(manifestPath),
     `.${basename3(manifestPath)}.tmp-${process.pid}-${Date.now()}-${Math.random().toString(36).slice(2)}`
@@ -7107,6 +7158,7 @@ function writeWorkspaceManifest(manifestPath, manifest) {
     writeFileSync6(tempPath, `${JSON.stringify(manifest, null, 2)}
 `, { mode: 384 });
     renameSync4(tempPath, manifestPath);
+    syncManifestDirOwnership(manifestPath, deps);
   } catch (err) {
     rmSync4(tempPath, { force: true });
     throw err;
@@ -7177,7 +7229,7 @@ function resolveWorkspaceCwd(config, command) {
   if (!allowed) {
     throw new Error(`Workspace path is outside AMASTER_WORKSPACE_ALLOWLIST: ${cwd}`);
   }
-  if (!existsSync7(cwd) || !statSync3(cwd).isDirectory()) {
+  if (!existsSync7(cwd) || !statSync4(cwd).isDirectory()) {
     throw new Error(`Workspace path does not exist or is not a directory: ${cwd}`);
   }
   return cwd;
@@ -7247,7 +7299,7 @@ function resolveExecutionWorkspace(config, command, opts = {}) {
 }
 
 // src/amaster-runtime-daemon/workspace-gc.mjs
-import { existsSync as existsSync8, readdirSync as readdirSync4, statSync as statSync4 } from "node:fs";
+import { existsSync as existsSync8, readdirSync as readdirSync4, statSync as statSync5 } from "node:fs";
 import { join as join9, resolve as resolve5 } from "node:path";
 function readIsoTime(value) {
   if (typeof value !== "string" || !value.trim()) return null;
@@ -7289,7 +7341,7 @@ function directorySizeBytes(path) {
     if (!current) continue;
     let stat;
     try {
-      stat = statSync4(current, { throwIfNoEntry: false });
+      stat = statSync5(current, { throwIfNoEntry: false });
     } catch {
       continue;
     }
@@ -7375,7 +7427,7 @@ function planManagedWorkspaceGcDryRun(input) {
 }
 
 // src/amaster-runtime-daemon/runtime-status-summary.mjs
-import { existsSync as existsSync9, readdirSync as readdirSync5, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync9, readdirSync as readdirSync5, statSync as statSync6 } from "node:fs";
 import { dirname as dirname6, join as join10, resolve as resolve6 } from "node:path";
 function runtimeStatusDirectoryEntries(path) {
   try {
@@ -7392,7 +7444,7 @@ function runtimeStatusDirectorySizeBytes(path) {
     if (!current) continue;
     let stat;
     try {
-      stat = statSync5(current, { throwIfNoEntry: false });
+      stat = statSync6(current, { throwIfNoEntry: false });
     } catch {
       continue;
     }
@@ -7630,13 +7682,13 @@ function summarizeAmasterRuntimeVersionDrift(input = {}) {
 import { createHash as createHash7 } from "node:crypto";
 import {
   chmodSync as chmodSync3,
-  chownSync,
+  chownSync as chownSync2,
   lchownSync,
   lstatSync as lstatSync4,
   readdirSync as readdirSync6
 } from "node:fs";
 import { resolve as resolve7, sep } from "node:path";
-var defaultFs = { chmodSync: chmodSync3, chownSync, lchownSync, lstatSync: lstatSync4, readdirSync: readdirSync6 };
+var defaultFs = { chmodSync: chmodSync3, chownSync: chownSync2, lchownSync, lstatSync: lstatSync4, readdirSync: readdirSync6 };
 function defaultHashRunId(runId) {
   return Number.parseInt(createHash7("sha256").update(runId).digest("hex").slice(0, 8), 16);
 }
@@ -7765,7 +7817,7 @@ function preparePiChildIsolation(input) {
 import { createHash as createHash8 } from "node:crypto";
 import {
   chmodSync as chmodSync4,
-  chownSync as chownSync2,
+  chownSync as chownSync3,
   existsSync as existsSync10,
   lchownSync as lchownSync2,
   lstatSync as lstatSync5,
@@ -7785,7 +7837,7 @@ var DEFAULT_GID_BASE = 1e5;
 var DEFAULT_GID_SPAN = 1e6;
 var defaultFs2 = {
   chmodSync: chmodSync4,
-  chownSync: chownSync2,
+  chownSync: chownSync3,
   existsSync: existsSync10,
   lchownSync: lchownSync2,
   lstatSync: lstatSync5,
@@ -8528,7 +8580,7 @@ function verifyTrustedPiRuntimeAssertion(input) {
 // src/amaster-runtime-daemon/workspace-status.mjs
 import { spawnSync as spawnSync4 } from "node:child_process";
 import { createHash as createHash10 } from "node:crypto";
-import { existsSync as existsSync12, readdirSync as readdirSync8, readFileSync as readFileSync10, statSync as statSync6 } from "node:fs";
+import { existsSync as existsSync12, readdirSync as readdirSync8, readFileSync as readFileSync10, statSync as statSync7 } from "node:fs";
 import { basename as basename5, extname, isAbsolute as isAbsolute7, join as join13, relative as relative7, resolve as resolve10 } from "node:path";
 var WORKSPACE_RUNTIME_SERVICES_FILENAME = ".amaster-runtime-services.json";
 var ARTIFACT_EXTENSIONS = /* @__PURE__ */ new Map([
@@ -8661,7 +8713,7 @@ function scanArtifactCandidates(cwd, opts = {}) {
       const type = ARTIFACT_EXTENSIONS.get(ext) ?? "file";
       let stat;
       try {
-        stat = statSync6(fullPath);
+        stat = statSync7(fullPath);
       } catch {
         continue;
       }
@@ -9394,7 +9446,7 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.11";
+var CONNECTOR_VERSION = "0.1.1-beta.13";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";
@@ -9681,7 +9733,7 @@ function safeDirectorySummary(pathValue) {
     return { configured: false, available: false, entryCount: 0 };
   }
   try {
-    const stat = statSync7(pathValue);
+    const stat = statSync8(pathValue);
     if (!stat.isDirectory()) {
       return { configured: true, available: false, entryCount: 0, reason: "not_directory" };
     }
@@ -9715,7 +9767,7 @@ function safeSkillRootSummary(kind, source, pathValue) {
         if (name.startsWith(".")) continue;
         const skillDir = join15(pathValue, name);
         try {
-          if (!statSync7(skillDir).isDirectory()) continue;
+          if (!statSync8(skillDir).isDirectory()) continue;
           if (!existsSync14(join15(skillDir, "SKILL.md"))) continue;
           skillCount += 1;
           if (skillCount >= MAX_PI_CAPABILITY_SOURCE_ENTRIES) {
@@ -9744,7 +9796,7 @@ function safeJsonConfigSummary(source, pathValue, counter) {
     return { source, configured: false, available: false, parseable: false };
   }
   try {
-    const stat = statSync7(pathValue);
+    const stat = statSync8(pathValue);
     if (!stat.isFile()) {
       return { source, configured: true, available: false, parseable: false, reason: "not_file" };
     }
@@ -13724,7 +13776,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       }
       if (!existsSync14(sourceCandidate)) throw new Error(`issue checkpoint file is missing: ${relativePath}`);
       const source = realpathSync5(sourceCandidate);
-      if (!pathWithin2(source, filesRoot) || !statSync7(source).isFile()) {
+      if (!pathWithin2(source, filesRoot) || !statSync8(source).isFile()) {
         throw new Error(`issue checkpoint source escapes its storage root: ${relativePath}`);
       }
       const expectedSha256 = readString(file.sha256);
@@ -13732,7 +13784,7 @@ async function materializeIssueCheckpoint(config, command, workspace) {
       if (!expectedSha256 || expectedByteSize === null || expectedByteSize <= 0) {
         throw new Error(`issue checkpoint evidence is incomplete: ${relativePath}`);
       }
-      if (hashFileSha256(source) !== expectedSha256 || statSync7(source).size !== expectedByteSize) {
+      if (hashFileSha256(source) !== expectedSha256 || statSync8(source).size !== expectedByteSize) {
         throw new Error(`issue checkpoint integrity mismatch: ${relativePath}`);
       }
       totalBytes += expectedByteSize;
@@ -13785,12 +13837,12 @@ async function saveIssueCheckpoint(config, command, workspace, candidates) {
   for (const candidate of candidates.slice(0, 20)) {
     const relativePath = safeCheckpointRelativePath(candidate.rawPath);
     const source = readString(candidate.filePath);
-    if (!relativePath || !source || !existsSync14(source) || !statSync7(source).isFile()) continue;
+    if (!relativePath || !source || !existsSync14(source) || !statSync8(source).isFile()) continue;
     const ownedSource = realpathSync5(source);
     if (!pathWithin2(ownedSource, workspaceRoot)) {
       throw new Error(`issue checkpoint source escapes its execution workspace: ${relativePath}`);
     }
-    const byteSize = statSync7(ownedSource).size;
+    const byteSize = statSync8(ownedSource).size;
     if (byteSize <= 0 || totalBytes + byteSize > MAX_CHECKPOINT_BYTES) continue;
     const target = resolve12(filesDir, relativePath);
     if (!pathWithin2(target, filesDir)) continue;

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.11";
+const CONNECTOR_VERSION = "0.1.1-beta.13";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.11",
+  "version": "0.1.1-beta.13",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",