@amaster.ai/employee-runtime-connector 0.1.1-beta.4 → 0.1.1-beta.6

package/dist/amaster-runtime-daemon.mjs

@@ -2096,15 +2096,28 @@ export default function amasterEffectiveToolsAttestor(pi) {
       }
 
       const allTools = pi.getAllTools();
+      if (allTools.some((tool) => typeof tool.name !== "string" || !tool.name)) {
+        throw new Error("registered tool identity mismatch");
+      }
+      const activeToolNames = pi.getActiveTools();
+      if (activeToolNames.some((name) => typeof name !== "string" || !name)) {
+        throw new Error("active tool identity mismatch");
+      }
+      activeToolNames.sort();
+      const activeToolNameSet = new Set(activeToolNames);
       const proxyPresent = allTools.some((tool) => tool.name === "mcp");
+      const nonCatalogTools = activeToolNames.filter((name) => !expectedByName.has(name));
       const adapterTools = allTools.filter((tool) => sourceIsMcpAdapter(tool.sourceInfo));
-      const directTools = adapterTools.filter((tool) => tool.name !== "mcp").map((tool) => ({
+      const directTools = adapterTools.filter((tool) => tool.name !== "mcp" && activeToolNameSet.has(tool.name)).map((tool) => ({
         name: tool.name,
         schemaHash: schemaHash(tool.parameters),
       }));
       const actualByName = new Map(directTools.map((entry) => [entry.name, entry]));
-      const missing = [...expectedByName.keys()].filter((name) => !actualByName.has(name)).sort();
-      const unexpected = [...actualByName.keys()].filter((name) => !expectedByName.has(name)).sort();
+      const missing = [...expectedByName.keys()].filter((name) => !actualByName.has(name) || !activeToolNameSet.has(name)).sort();
+      const unexpected = adapterTools
+        .map((tool) => tool.name)
+        .filter((name) => name !== "mcp" && !expectedByName.has(name))
+        .sort();
       const schemaMismatches = [...expectedByName.entries()].flatMap(([name, expected]) => {
         const actual = actualByName.get(name);
         return actual && actual.schemaHash !== expected.effectiveSchemaHash
@@ -2112,8 +2125,8 @@ export default function amasterEffectiveToolsAttestor(pi) {
           : [];
       });
       const effectiveSetHash = toolSetHash(directTools);
-      if (proxyPresent || missing.length > 0 || unexpected.length > 0 || schemaMismatches.length > 0) {
-        throw new Error("effective tool surface mismatch: proxy=" + proxyPresent + " missing=" + missing.join(",") + " unexpected=" + unexpected.join(",") + " schemas=" + schemaMismatches.map((entry) => entry.name).join(","));
+      if (proxyPresent || nonCatalogTools.length > 0 || missing.length > 0 || unexpected.length > 0 || schemaMismatches.length > 0) {
+        throw new Error("effective tool surface mismatch: proxy=" + proxyPresent + " nonCatalog=" + nonCatalogTools.join(",") + " missing=" + missing.join(",") + " unexpected=" + unexpected.join(",") + " schemas=" + schemaMismatches.map((entry) => entry.name).join(","));
       }
       if (effectiveSetHash !== manifest.effectiveSetHash) throw new Error("effective tool set hash mismatch");
       receipt = {
@@ -2168,6 +2181,18 @@ var MANAGED_PI_MCP_TOOL_MODE = "proxy_only";
 var MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE = "direct_typed";
 var MANAGED_PI_MCP_ARGS_NORMALIZATION = "json_string_control_characters_v1";
 var MANAGED_PI_MCP_ARGS_NORMALIZER_FILENAME = "amaster-mcp-args-normalizer.js";
+function applyManagedPiToolAllowlist(args, profile) {
+  const toolAllowlist = Array.isArray(profile?.toolAllowlist) ? profile.toolAllowlist.filter((name) => typeof name === "string" && name) : [];
+  if (toolAllowlist.length === 0) return [...args];
+  const printArgIndex = Math.max(args.lastIndexOf("-p"), args.lastIndexOf("--print"));
+  if (printArgIndex < 0) throw new Error("pi_managed_mcp_invocation_invalid: print mode argument missing");
+  return [
+    ...args.slice(0, printArgIndex),
+    "--tools",
+    toolAllowlist.join(","),
+    ...args.slice(printArgIndex)
+  ];
+}
 function createManagedPiMcpProfileApi(options = {}) {
   const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync2;
   const nowImpl = typeof options.now === "function" ? options.now : Date.now;
@@ -2264,6 +2289,12 @@ function createManagedPiMcpProfileApi(options = {}) {
   ]);
   const FORBIDDEN_ARGV = /* @__PURE__ */ new Set([
     "--no-tools",
+    "--no-builtin-tools",
+    "-nbt",
+    "--tools",
+    "-t",
+    "--exclude-tools",
+    "-xt",
     "--no-extensions",
     "--no-skills",
     "--no-session",
@@ -2550,7 +2581,7 @@ function createManagedPiMcpProfileApi(options = {}) {
       if (!ALLOWED_COMMAND_ENV2.has(name)) throw new Error(`pi_managed_mcp_env_injection_blocked: ${name}`);
     }
     const args = Array.isArray(input.extraArgs) ? input.extraArgs.map(String) : [];
-    if (args.some((arg) => FORBIDDEN_ARGV.has(arg) || arg.startsWith("--session=") || arg.startsWith("--fork=") || arg.startsWith("--session-dir=") || arg.startsWith("--extension=") || arg.startsWith("--package=") || arg.startsWith("--settings="))) {
+    if (args.some((arg) => FORBIDDEN_ARGV.has(arg) || arg.startsWith("--tools=") || arg.startsWith("--exclude-tools=") || arg.startsWith("--session=") || arg.startsWith("--fork=") || arg.startsWith("--session-dir=") || arg.startsWith("--extension=") || arg.startsWith("--package=") || arg.startsWith("--settings="))) {
       throw new Error("pi_managed_mcp_config_override_blocked: Pi config/tool/session argv is forbidden for governed runs");
     }
   }
@@ -3063,6 +3094,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         configPath,
         markerPath,
         env,
+        toolAllowlist: directCatalog ? [...directToolNames] : null,
         protectedValues: [.../* @__PURE__ */ new Set([
           sessionToken,
           ...seededRuntime.protectedValues,
@@ -3912,7 +3944,7 @@ function fixedRules(input, includeIssueLine) {
     "Use only the declared workspace; make concrete progress and report concisely.",
     "Before changing the task status to done, audit every explicit requirement in the task against the final evidence. A successful tool or document write proves delivery, not acceptance: inspect the delivered content for required sections, diagrams, tables, and factual constraints.",
     "Do not leave stale in-progress wording such as \u201Ccurrent run\u201D in a terminal deliverable; rewrite it to the final observed state. Do not list finalization itself as remaining or next work in a terminal deliverable.",
-    serverOwnedBusinessOutcomeReview ? "If any requirement is missing or cannot be verified, do not mark done or request final completion or Business Outcome review. Keep the issue in_progress or blocked with the exact gap and next owner. An intermediate review remains available only for an exact document revision that must be approved before execution can continue: use create_interaction with kind request_confirmation, payload.resolutionMode review, and purposeCode review_document_revision; never use that interaction as final completion or Outcome acceptance." : "If any requirement is missing or cannot be verified, do not mark done. To request review, use create_interaction with kind request_confirmation and payload.resolutionMode review; never call update_parent with status in_review. Otherwise keep the issue todo or blocked with the exact gap and next owner.",
+    serverOwnedBusinessOutcomeReview ? "If any requirement is missing or cannot be verified, do not mark done or request final completion or Business Outcome review. Keep the issue in_progress with the exact gap and next owner. An intermediate review remains available only for an exact document revision that must be approved before execution can continue: use create_interaction with kind request_confirmation, payload.resolutionMode review, and purposeCode review_document_revision; never use that interaction as final completion or Outcome acceptance." : "If anything is missing, do not mark done. `update_parent` cannot write `in_review` or `blocked`. Human review: create_interaction kind request_confirmation with payload.resolutionMode review. Required platform/provider/external action needs a typed interaction or first-class blocker; otherwise keep todo with the gap and owner.",
     DEADLINE_POSTURE_GUARD,
     "Do not install operating-system or user-global packages, and do not use host package managers such as brew, apt, yum, or global pip/npm installs. Use tools already available or workspace-local dependencies or virtual environments. If a required renderer or evaluator is unavailable, keep the source artifact, record the exact verification gap, and do not mutate the host.",
     `- command id: ${input.commandId}`,
@@ -3971,9 +4003,13 @@ function recoveryInstructionText(input) {
   if (input.wakeReason === "source_scoped_recovery_action") {
     const wake = asRecord(context.paperclipWake);
     const unresolvedBlockerIssueIds = Array.isArray(wake.unresolvedBlockerIssueIds) ? wake.unresolvedBlockerIssueIds.map(readString).filter(Boolean) : [];
-    const blockedDisposition = unresolvedBlockerIssueIds.length > 0 ? `- blocked only when the issue already has an unresolved first-class blocker; name the exact blocker and wait condition from: ${unresolvedBlockerIssueIds.join(", ")};` : [
-      "- if source work remains on this issue, choose continuation/todo and then execute the Runtime Action Continuation Option rendered below so the control plane can queue a normal-model continuation;",
-      "- do not set `blocked` without an unresolved first-class blocker; a named owner or proposed next action alone is not a blocker;"
+    const blockedDisposition = unresolvedBlockerIssueIds.length > 0 ? [
+      "- `update_parent` cannot write `blocked`; the existing first-class blocker path is authoritative and must not be replaced by `in_progress`;",
+      `- name the exact blocker and wait condition from: ${unresolvedBlockerIssueIds.join(", ")}; continuation/todo can wait behind that blocker when source work remains;`
+    ].join("\n") : [
+      "- `update_parent` cannot write `blocked`; do not use `in_progress` to represent a wait;",
+      "- when a specific human, platform, provider, or external action is required before work can continue, create a typed interaction that names the exact owner and unblock action;",
+      "- otherwise, if source work remains on this issue, choose continuation/todo and then execute the Runtime Action Continuation Option rendered below so the control plane can queue a normal-model continuation;"
     ].join("\n");
     return [
       "This is a status-only source recovery. Do not repeat the original source work or create or revise deliverables.",
@@ -5781,6 +5817,14 @@ function piMessageText(message) {
     return readString(block.text) ?? readString(block.content) ?? "";
   }).filter(Boolean).join("\n").trim();
 }
+function piMessageHasToolCall(message) {
+  const content = asRecord(message).content;
+  if (!Array.isArray(content)) return false;
+  return content.some((entry) => {
+    const block = asRecord(entry);
+    return block.type === "toolCall" && Boolean(readString(block.name));
+  });
+}
 function appendUniqueText(values, text) {
   const normalized = typeof text === "string" ? text.trim() : "";
   if (!normalized) return false;
@@ -5868,7 +5912,7 @@ function maybeCapturePiMessage(event, messages, usage) {
   const message = asRecord(event.message);
   if (message.role === "assistant") {
     const text = piMessageText(message);
-    capturedAssistantOutput = capturePiAssistantText(text, messages) || capturedAssistantOutput;
+    capturedAssistantOutput = capturePiAssistantText(text, messages) || piMessageHasToolCall(message) || capturedAssistantOutput;
     assignPiUsage(usage, piMessageUsage(message));
   }
   const eventMessages = Array.isArray(event.messages) ? event.messages : [];
@@ -5878,7 +5922,7 @@ function maybeCapturePiMessage(event, messages, usage) {
       continue;
     }
     const text = piMessageText(eventMessage);
-    capturedAssistantOutput = capturePiAssistantText(text, messages) || capturedAssistantOutput;
+    capturedAssistantOutput = capturePiAssistantText(text, messages) || piMessageHasToolCall(eventMessage) || capturedAssistantOutput;
     assignPiUsage(usage, piMessageUsage(eventMessage));
   }
   return capturedAssistantOutput;
@@ -8695,7 +8739,7 @@ function assertSourceAcquisitionRuntimeAuthority({
 }
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.4";
+var CONNECTOR_VERSION = "0.1.1-beta.6";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = "source_acquisition_v1";
 var SOURCE_ACQUISITION_PROFILE_VERSION = "source_acquisition_v1";
@@ -10478,6 +10522,14 @@ async function executeModelCallCommand(config, command, signal) {
       sourceWorkspacePath: process.cwd()
     });
     piModelCallProfile = executor.kind === "pi" ? preparePiModelCallProfile(command.commandId, baseEnv) : null;
+    if (piModelCallProfile) {
+      await syncPiExecutorProviderConfig(
+        config,
+        command,
+        piModelCallProfile.env.PI_CODING_AGENT_DIR,
+        resolvePiExecutorProviderConfig(config, command, baseEnv)
+      );
+    }
     execution = await runExecutor(invocation.command, invocation.args, {
       cwd: process.cwd(),
       env: piModelCallProfile?.env ?? baseEnv,
@@ -13162,6 +13214,7 @@ async function executeRunCommand(config, command) {
     }
     if (managedMcpProfile) {
       executorEnv = managedMcpProfile.env;
+      if (executor.kind === "pi") invocation.args = applyManagedPiToolAllowlist(invocation.args, managedMcpProfile);
       await ingestLog(config, command, "system", "info", `Attested isolated ${executor.kind} managed MCP profile`, {
         presentationKind: "managed_mcp_attestation",
         ...managedMcpProfile.attestation

package/dist/amaster-runtime.mjs

@@ -5,7 +5,7 @@ import { dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.4";
+const CONNECTOR_VERSION = "0.1.1-beta.6";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.4",
+  "version": "0.1.1-beta.6",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",