@amaster.ai/employee-runtime-connector 0.1.1-beta.4 → 0.1.1-beta.5

package/dist/amaster-runtime-daemon.mjs

@@ -2096,15 +2096,28 @@ export default function amasterEffectiveToolsAttestor(pi) {
       }
 
       const allTools = pi.getAllTools();
+      if (allTools.some((tool) => typeof tool.name !== "string" || !tool.name)) {
+        throw new Error("registered tool identity mismatch");
+      }
+      const activeToolNames = pi.getActiveTools();
+      if (activeToolNames.some((name) => typeof name !== "string" || !name)) {
+        throw new Error("active tool identity mismatch");
+      }
+      activeToolNames.sort();
+      const activeToolNameSet = new Set(activeToolNames);
       const proxyPresent = allTools.some((tool) => tool.name === "mcp");
+      const nonCatalogTools = activeToolNames.filter((name) => !expectedByName.has(name));
       const adapterTools = allTools.filter((tool) => sourceIsMcpAdapter(tool.sourceInfo));
-      const directTools = adapterTools.filter((tool) => tool.name !== "mcp").map((tool) => ({
+      const directTools = adapterTools.filter((tool) => tool.name !== "mcp" && activeToolNameSet.has(tool.name)).map((tool) => ({
         name: tool.name,
         schemaHash: schemaHash(tool.parameters),
       }));
       const actualByName = new Map(directTools.map((entry) => [entry.name, entry]));
-      const missing = [...expectedByName.keys()].filter((name) => !actualByName.has(name)).sort();
-      const unexpected = [...actualByName.keys()].filter((name) => !expectedByName.has(name)).sort();
+      const missing = [...expectedByName.keys()].filter((name) => !actualByName.has(name) || !activeToolNameSet.has(name)).sort();
+      const unexpected = adapterTools
+        .map((tool) => tool.name)
+        .filter((name) => name !== "mcp" && !expectedByName.has(name))
+        .sort();
       const schemaMismatches = [...expectedByName.entries()].flatMap(([name, expected]) => {
         const actual = actualByName.get(name);
         return actual && actual.schemaHash !== expected.effectiveSchemaHash
@@ -2112,8 +2125,8 @@ export default function amasterEffectiveToolsAttestor(pi) {
           : [];
       });
       const effectiveSetHash = toolSetHash(directTools);
-      if (proxyPresent || missing.length > 0 || unexpected.length > 0 || schemaMismatches.length > 0) {
-        throw new Error("effective tool surface mismatch: proxy=" + proxyPresent + " missing=" + missing.join(",") + " unexpected=" + unexpected.join(",") + " schemas=" + schemaMismatches.map((entry) => entry.name).join(","));
+      if (proxyPresent || nonCatalogTools.length > 0 || missing.length > 0 || unexpected.length > 0 || schemaMismatches.length > 0) {
+        throw new Error("effective tool surface mismatch: proxy=" + proxyPresent + " nonCatalog=" + nonCatalogTools.join(",") + " missing=" + missing.join(",") + " unexpected=" + unexpected.join(",") + " schemas=" + schemaMismatches.map((entry) => entry.name).join(","));
       }
       if (effectiveSetHash !== manifest.effectiveSetHash) throw new Error("effective tool set hash mismatch");
       receipt = {
@@ -2168,6 +2181,18 @@ var MANAGED_PI_MCP_TOOL_MODE = "proxy_only";
 var MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE = "direct_typed";
 var MANAGED_PI_MCP_ARGS_NORMALIZATION = "json_string_control_characters_v1";
 var MANAGED_PI_MCP_ARGS_NORMALIZER_FILENAME = "amaster-mcp-args-normalizer.js";
+function applyManagedPiToolAllowlist(args, profile) {
+  const toolAllowlist = Array.isArray(profile?.toolAllowlist) ? profile.toolAllowlist.filter((name) => typeof name === "string" && name) : [];
+  if (toolAllowlist.length === 0) return [...args];
+  const printArgIndex = Math.max(args.lastIndexOf("-p"), args.lastIndexOf("--print"));
+  if (printArgIndex < 0) throw new Error("pi_managed_mcp_invocation_invalid: print mode argument missing");
+  return [
+    ...args.slice(0, printArgIndex),
+    "--tools",
+    toolAllowlist.join(","),
+    ...args.slice(printArgIndex)
+  ];
+}
 function createManagedPiMcpProfileApi(options = {}) {
   const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync2;
   const nowImpl = typeof options.now === "function" ? options.now : Date.now;
@@ -2264,6 +2289,12 @@ function createManagedPiMcpProfileApi(options = {}) {
   ]);
   const FORBIDDEN_ARGV = /* @__PURE__ */ new Set([
     "--no-tools",
+    "--no-builtin-tools",
+    "-nbt",
+    "--tools",
+    "-t",
+    "--exclude-tools",
+    "-xt",
     "--no-extensions",
     "--no-skills",
     "--no-session",
@@ -2550,7 +2581,7 @@ function createManagedPiMcpProfileApi(options = {}) {
       if (!ALLOWED_COMMAND_ENV2.has(name)) throw new Error(`pi_managed_mcp_env_injection_blocked: ${name}`);
     }
     const args = Array.isArray(input.extraArgs) ? input.extraArgs.map(String) : [];
-    if (args.some((arg) => FORBIDDEN_ARGV.has(arg) || arg.startsWith("--session=") || arg.startsWith("--fork=") || arg.startsWith("--session-dir=") || arg.startsWith("--extension=") || arg.startsWith("--package=") || arg.startsWith("--settings="))) {
+    if (args.some((arg) => FORBIDDEN_ARGV.has(arg) || arg.startsWith("--tools=") || arg.startsWith("--exclude-tools=") || arg.startsWith("--session=") || arg.startsWith("--fork=") || arg.startsWith("--session-dir=") || arg.startsWith("--extension=") || arg.startsWith("--package=") || arg.startsWith("--settings="))) {
       throw new Error("pi_managed_mcp_config_override_blocked: Pi config/tool/session argv is forbidden for governed runs");
     }
   }
@@ -3063,6 +3094,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         configPath,
         markerPath,
         env,
+        toolAllowlist: directCatalog ? [...directToolNames] : null,
         protectedValues: [.../* @__PURE__ */ new Set([
           sessionToken,
           ...seededRuntime.protectedValues,
@@ -5781,6 +5813,14 @@ function piMessageText(message) {
     return readString(block.text) ?? readString(block.content) ?? "";
   }).filter(Boolean).join("\n").trim();
 }
+function piMessageHasToolCall(message) {
+  const content = asRecord(message).content;
+  if (!Array.isArray(content)) return false;
+  return content.some((entry) => {
+    const block = asRecord(entry);
+    return block.type === "toolCall" && Boolean(readString(block.name));
+  });
+}
 function appendUniqueText(values, text) {
   const normalized = typeof text === "string" ? text.trim() : "";
   if (!normalized) return false;
@@ -5868,7 +5908,7 @@ function maybeCapturePiMessage(event, messages, usage) {
   const message = asRecord(event.message);
   if (message.role === "assistant") {
     const text = piMessageText(message);
-    capturedAssistantOutput = capturePiAssistantText(text, messages) || capturedAssistantOutput;
+    capturedAssistantOutput = capturePiAssistantText(text, messages) || piMessageHasToolCall(message) || capturedAssistantOutput;
     assignPiUsage(usage, piMessageUsage(message));
   }
   const eventMessages = Array.isArray(event.messages) ? event.messages : [];
@@ -5878,7 +5918,7 @@ function maybeCapturePiMessage(event, messages, usage) {
       continue;
     }
     const text = piMessageText(eventMessage);
-    capturedAssistantOutput = capturePiAssistantText(text, messages) || capturedAssistantOutput;
+    capturedAssistantOutput = capturePiAssistantText(text, messages) || piMessageHasToolCall(eventMessage) || capturedAssistantOutput;
     assignPiUsage(usage, piMessageUsage(eventMessage));
   }
   return capturedAssistantOutput;
@@ -8695,7 +8735,7 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.4";
+var CONNECTOR_VERSION = "0.1.1-beta.5";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";
@@ -10478,6 +10518,14 @@ async function executeModelCallCommand(config, command, signal) {
       sourceWorkspacePath: process.cwd()
     });
     piModelCallProfile = executor.kind === "pi" ? preparePiModelCallProfile(command.commandId, baseEnv) : null;
+    if (piModelCallProfile) {
+      await syncPiExecutorProviderConfig(
+        config,
+        command,
+        piModelCallProfile.env.PI_CODING_AGENT_DIR,
+        resolvePiExecutorProviderConfig(config, command, baseEnv)
+      );
+    }
     execution = await runExecutor(invocation.command, invocation.args, {
       cwd: process.cwd(),
       env: piModelCallProfile?.env ?? baseEnv,
@@ -13162,6 +13210,7 @@ async function executeRunCommand(config, command) {
     }
     if (managedMcpProfile) {
       executorEnv = managedMcpProfile.env;
+      if (executor.kind === "pi") invocation.args = applyManagedPiToolAllowlist(invocation.args, managedMcpProfile);
       await ingestLog(config, command, "system", "info", `Attested isolated ${executor.kind} managed MCP profile`, {
         presentationKind: "managed_mcp_attestation",
         ...managedMcpProfile.attestation

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.4";
+const CONNECTOR_VERSION = "0.1.1-beta.5";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.4",
+  "version": "0.1.1-beta.5",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",