@amaster.ai/employee-runtime-connector 0.1.1-beta.12 → 0.1.1-beta.13

package/dist/amaster-runtime-daemon.mjs

@@ -3036,6 +3036,33 @@ function createManagedPiMcpProfileApi(options = {}) {
     symlinkSync(npmSource, join4(agentDir, "npm"), "dir");
     return { adapterVersion, protectedValues };
   }
+  function seedDelegatedPiRuntime(sourceHome, agentDir) {
+    const source = resolve2(nonEmpty2(sourceHome, "sourcePiHome"));
+    const sourceStat = lstatSync2(source);
+    if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
+      throw new Error("pi_delegated_mcp_source_config_unsafe: Pi home");
+    }
+    const protectedValues = [];
+    for (const entry of readdirSync2(source, { withFileTypes: true })) {
+      if (entry.name === "mcp.json" || entry.name === "mcp-cache.json") continue;
+      const sourcePath = join4(source, entry.name);
+      const targetPath = join4(agentDir, entry.name);
+      if (entry.isDirectory()) {
+        symlinkSync(sourcePath, targetPath, platform2() === "win32" ? "junction" : "dir");
+      } else if (entry.isFile()) {
+        copyPrivateFile(sourcePath, targetPath);
+      }
+    }
+    const authSource = join4(source, "auth.json");
+    if (existsSync3(authSource)) {
+      try {
+        collectAuthSecretStrings2(JSON.parse(readFileSync3(authSource, "utf8")), protectedValues);
+      } catch {
+        throw new Error("pi_delegated_mcp_attestation_failed: source Pi auth is invalid");
+      }
+    }
+    return { protectedValues };
+  }
   function attestPi(executorCommand, env, configPath, expectedConfig) {
     const resolvedExecutorCommand = resolvePiExecutablePath(executorCommand, env);
     const executorIdentity = piExecutableIdentity(resolvedExecutorCommand);
@@ -3339,17 +3366,21 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
     assertInvocationIsolation2(input);
     const { gateway, gatewayUrl, sessionToken, headers, runId, mcpToolMode, directCatalog } = validateAuthority2(input);
     const runDir = resolve2(nonEmpty2(input.runDir, "runDir"));
+    const cwd = resolve2(nonEmpty2(input.cwd, "cwd"));
+    if (!within4(cwd, runDir)) throw new Error("pi_delegated_mcp_owner_mismatch: cwd is outside the managed run");
+    assertNoProjectMcpOverride(cwd, runDir);
     const executorHome = resolve2(nonEmpty2(input.executorHome, "executorHome"));
     if (!within4(executorHome, join4(runDir, "executors"))) throw new Error("pi_delegated_mcp_owner_mismatch: executorHome is outside the managed run");
     const profileRoot = join4(executorHome, "delegated-mcp");
     if (existsSync3(profileRoot)) throw new Error(`pi_delegated_mcp_profile_exists: ${profileRoot}`);
+    const piCodingAgentDir = join4(profileRoot, "pi-coding-agent-dir");
     const sessionsRoot = join4(profileRoot, "sessions");
     const tmp = join4(profileRoot, "tmp");
-    for (const directory of [profileRoot, sessionsRoot, tmp]) mkdirSync3(directory, { recursive: true, mode: 448 });
+    for (const directory of [profileRoot, piCodingAgentDir, sessionsRoot, tmp]) mkdirSync3(directory, { recursive: true, mode: 448 });
     try {
       const markerPath = join4(profileRoot, DELEGATED_PROFILE_MARKER);
       const owner = Object.freeze({ commandId: input.commandId, runId });
-      writePrivateFile2(markerPath, `${JSON.stringify({ version: 1, ...owner, profileRoot })}
+      writePrivateFile2(markerPath, `${JSON.stringify({ version: 1, ...owner, profileRoot, piCodingAgentDir })}
 `);
       const runtimeAuth = record7(input.runtimeAuth);
       const authority = Object.freeze({
@@ -3364,8 +3395,9 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       if (!sourceStat.isDirectory() || sourceStat.isSymbolicLink()) {
         throw new Error("pi_delegated_mcp_source_config_unsafe: Pi home");
       }
+      const seededRuntime = seedDelegatedPiRuntime(sourcePiHome, piCodingAgentDir);
       const sourceMcp = readJsonObjectFile(join4(sourcePiHome, "mcp.json"));
-      const configPath = join4(profileRoot, "mcp.json");
+      const configPath = join4(piCodingAgentDir, "mcp.json");
       const directToolNames = directCatalog?.tools.map((tool) => tool.exposedName) ?? [];
       const serverConfig = {
         type: "http",
@@ -3390,6 +3422,9 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
       const env = {
         ...input.baseEnv,
         ...record7(input.commandEnv),
+        PI_AGENT_HOME: sourcePiHome,
+        PI_CODING_AGENT_DIR: piCodingAgentDir,
+        "AMASTER-CLI_CODING_AGENT_DIR": piCodingAgentDir,
         PI_AGENT_MCP_SERVERS_FILE: configPath,
         PI_CODING_AGENT_SESSION_DIR: sessionsRoot,
         "AMASTER-CLI_CODING_AGENT_SESSION_DIR": sessionsRoot,
@@ -3411,6 +3446,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         runId,
         sessionId: gateway.sessionId,
         sourcePiHome,
+        piCodingAgentDir,
         configSha256: sha256(readFileSync3(configPath))
       };
       return {
@@ -3422,7 +3458,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         markerPath,
         env,
         toolAllowlist: null,
-        protectedValues: [sessionToken],
+        protectedValues: [.../* @__PURE__ */ new Set([sessionToken, ...seededRuntime.protectedValues])],
         attestation: {
           ...attestationFacts,
           attestationId: createHash3("sha256").update(JSON.stringify(attestationFacts)).digest("hex"),
@@ -9410,7 +9446,7 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.12";
+var CONNECTOR_VERSION = "0.1.1-beta.13";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.12";
+const CONNECTOR_VERSION = "0.1.1-beta.13";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.12",
+  "version": "0.1.1-beta.13",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",