@amaster.ai/employee-runtime-connector 0.1.1-beta.46 → 0.1.1-beta.47

package/dist/amaster-runtime-daemon.mjs

@@ -2699,7 +2699,6 @@ export default function amasterEffectiveToolsAttestor(pi) {
 
 // src/amaster-runtime-daemon/pi-managed-mcp-profile.mjs
 var MANAGED_PI_MCP_TOOL_MODE = "proxy_only";
-var MANAGED_PI_HYBRID_MCP_TOOL_MODE = "hybrid";
 var MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE = "direct_typed";
 var MANAGED_PI_MCP_ARGS_NORMALIZATION = "json_string_control_characters_v1";
 var MANAGED_PI_MCP_ARGS_NORMALIZER_FILENAME = "amaster-mcp-args-normalizer.js";
@@ -2732,12 +2731,43 @@ function createManagedPiMcpProfileApi(options = {}) {
     "wiki_read_page",
     "wiki_list_pages"
   ]);
-  const HYBRID_DIRECT_TYPED_V1_TOOL_NAMES = /* @__PURE__ */ new Set([
-    "amaster.read_company_snapshot",
-    "amaster.read_governed_business_state",
+  const FULL_DIRECT_TYPED_V1_BASE_TOOL_NAMES = /* @__PURE__ */ new Set([
     "runtime_action.describe",
+    "runtime_action.prepare",
+    "runtime_action.submit",
+    "runtime_action.plan",
+    "runtime_action.commit",
+    "runtime_action.status",
+    "amaster.read_company_snapshot",
+    "amaster.read_issue",
     "amaster.read_issue_document",
-    "amaster.read_issue_evidence"
+    "amaster.read_issue_delivery",
+    "amaster.read_issue_evidence",
+    "amaster.read_governed_business_state",
+    "amaster.read_company_diagnosis",
+    "amaster.publish_company_diagnosis_brief"
+  ]);
+  const FULL_DIRECT_TYPED_V1_WIKI_TOOL_NAMES = /* @__PURE__ */ new Set([
+    "wiki_search",
+    "wiki_read_page",
+    "wiki_list_pages",
+    "wiki_read_source",
+    "wiki_write_page"
+  ]);
+  const FULL_DIRECT_TYPED_V1_CONNECTOR_TOOL_NAMES = /* @__PURE__ */ new Set([
+    "connector.search_actions",
+    "connector.get_action_guide",
+    "connector.execute_action",
+    "connector.admin.list_apps",
+    "connector.admin.list_connections",
+    "connector.admin.upsert_connection",
+    "connector.admin.delete_connection",
+    "connector.admin.validate_connection"
+  ]);
+  const FULL_DIRECT_TYPED_V1_TOOL_NAMES = /* @__PURE__ */ new Set([
+    ...FULL_DIRECT_TYPED_V1_BASE_TOOL_NAMES,
+    ...FULL_DIRECT_TYPED_V1_WIKI_TOOL_NAMES,
+    ...FULL_DIRECT_TYPED_V1_CONNECTOR_TOOL_NAMES
   ]);
   const SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES = /* @__PURE__ */ new Set([
     "runtime_action.submit",
@@ -2976,12 +3006,18 @@ function createManagedPiMcpProfileApi(options = {}) {
     }
     const tools = Array.isArray(catalog.tools) ? catalog.tools.map(record6) : [];
     const declaredToolNames = new Set(tools.map((tool) => tool.name).filter((name) => typeof name === "string"));
-    const sourceAcquisitionCatalog = mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && tools.length === SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES.size && [...SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES].every((name) => declaredToolNames.has(name));
-    const admittedToolNames = mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE ? HYBRID_DIRECT_TYPED_V1_TOOL_NAMES : sourceAcquisitionCatalog ? SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES : /* @__PURE__ */ new Set([...DIRECT_TYPED_V1_TOOL_NAMES, ...DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES]);
-    const directTypedSizeValid = mcpToolMode !== MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE || sourceAcquisitionCatalog || tools.length === DIRECT_TYPED_V1_TOOL_NAMES.size || tools.length === DIRECT_TYPED_V1_TOOL_NAMES.size + DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES.size;
-    if (!directTypedSizeValid || mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE && tools.length !== admittedToolNames.size) {
+    const covers = (set) => [...set].every((name) => declaredToolNames.has(name));
+    const countIn = (set) => tools.filter((tool) => set.has(tool.name)).length;
+    const sourceAcquisitionCatalog = mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && tools.length === SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES.size && covers(SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES);
+    const diagnosisWikiCount = countIn(DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES);
+    const diagnosisCatalog = mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && !sourceAcquisitionCatalog && tools.length === DIRECT_TYPED_V1_TOOL_NAMES.size + diagnosisWikiCount && covers(DIRECT_TYPED_V1_TOOL_NAMES) && (diagnosisWikiCount === 0 || diagnosisWikiCount === DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES.size);
+    const fullWikiCount = countIn(FULL_DIRECT_TYPED_V1_WIKI_TOOL_NAMES);
+    const fullConnectorCount = countIn(FULL_DIRECT_TYPED_V1_CONNECTOR_TOOL_NAMES);
+    const fullCatalog = mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && !sourceAcquisitionCatalog && !diagnosisCatalog && tools.length === FULL_DIRECT_TYPED_V1_BASE_TOOL_NAMES.size + fullWikiCount + fullConnectorCount && covers(FULL_DIRECT_TYPED_V1_BASE_TOOL_NAMES) && (fullWikiCount === 0 || fullWikiCount === FULL_DIRECT_TYPED_V1_WIKI_TOOL_NAMES.size) && (fullConnectorCount === 0 || fullConnectorCount === FULL_DIRECT_TYPED_V1_CONNECTOR_TOOL_NAMES.size) && tools.every((tool) => FULL_DIRECT_TYPED_V1_TOOL_NAMES.has(tool.name));
+    if (mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && !sourceAcquisitionCatalog && !diagnosisCatalog && !fullCatalog) {
       throw new Error("pi_managed_mcp_invalid: direct tool catalog size mismatch");
     }
+    const admittedToolNames = sourceAcquisitionCatalog ? SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES : diagnosisCatalog ? /* @__PURE__ */ new Set([...DIRECT_TYPED_V1_TOOL_NAMES, ...DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES]) : FULL_DIRECT_TYPED_V1_TOOL_NAMES;
     const names = /* @__PURE__ */ new Set();
     const exposedNames = /* @__PURE__ */ new Set();
     const normalized = tools.map((tool) => {
@@ -3010,9 +3046,6 @@ function createManagedPiMcpProfileApi(options = {}) {
       if (!(/* @__PURE__ */ new Set(["read", "write", "destructive"])).has(riskLevel)) {
         throw new Error(`pi_managed_mcp_invalid: direct tool risk level mismatch for ${name}`);
       }
-      if (mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE && riskLevel !== "read") {
-        throw new Error(`pi_managed_mcp_invalid: hybrid direct tool must be read-only for ${name}`);
-      }
       return {
         name,
         exposedName,
@@ -3024,16 +3057,6 @@ function createManagedPiMcpProfileApi(options = {}) {
         effectiveSchemaHash: stablePiToolSchemaHash(inputSchema, { adapterNormalized: true })
       };
     });
-    if (mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE) {
-      const requiredToolNames = sourceAcquisitionCatalog ? SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES : DIRECT_TYPED_V1_TOOL_NAMES;
-      for (const name of requiredToolNames) {
-        if (!names.has(name)) throw new Error("pi_managed_mcp_invalid: direct tool catalog name mismatch");
-      }
-      const wikiReadCount = sourceAcquisitionCatalog ? 0 : [...DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES].filter((name) => names.has(name)).length;
-      if (wikiReadCount !== 0 && wikiReadCount !== DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES.size) {
-        throw new Error("pi_managed_mcp_invalid: diagnosis wiki read catalog incomplete");
-      }
-    }
     const setHash = stablePiDirectCatalogSetHash(normalized.map((tool) => ({
       name: tool.name,
       exposedName: tool.exposedName,
@@ -3120,7 +3143,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     }
     if ((runtimeAuth.issueId ?? null) !== (headers["x-amaster-issue-id"] ?? null)) throw new Error("pi_managed_mcp_invalid: issue authority mismatch");
     const mcpToolMode = gateway.mcpToolMode ?? MANAGED_PI_MCP_TOOL_MODE;
-    if (mcpToolMode !== MANAGED_PI_MCP_TOOL_MODE && mcpToolMode !== MANAGED_PI_HYBRID_MCP_TOOL_MODE && mcpToolMode !== MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE) {
+    if (mcpToolMode !== MANAGED_PI_MCP_TOOL_MODE && mcpToolMode !== MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE) {
       throw new Error("pi_managed_mcp_invalid: unsupported managed Pi MCP tool mode");
     }
     const directCatalog = mcpToolMode !== MANAGED_PI_MCP_TOOL_MODE ? validateDirectCatalog(gateway, mcpToolMode) : null;
@@ -3711,7 +3734,7 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
             name: tool.exposedName,
             schemaHash: tool.effectiveSchemaHash
           }))),
-          proxyMode: mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE ? "required" : "forbidden",
+          proxyMode: "forbidden",
           attestorSourceSha256,
           configSha256: sha2562(readFileSync3(configPath)),
           cacheSha256
@@ -3833,9 +3856,6 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
   function prepareDelegatedPiMcpProfile2(input) {
     assertInvocationIsolation2(input);
     const { gateway, gatewayUrl, sessionToken, headers, runId, mcpToolMode, directCatalog } = validateAuthority2(input);
-    if (mcpToolMode === MANAGED_PI_HYBRID_MCP_TOOL_MODE) {
-      throw new Error("pi_delegated_mcp_hybrid_unsupported: managed effective-tool attestation is required");
-    }
     const runDir = resolve3(nonEmpty2(input.runDir, "runDir"));
     const cwd = resolve3(nonEmpty2(input.cwd, "cwd"));
     if (!within2(cwd, runDir)) throw new Error("pi_delegated_mcp_owner_mismatch: cwd is outside the managed run");
@@ -4905,6 +4925,11 @@ function continuationText(context) {
   if (!body) return "";
   return [readString(summary.title), body].filter(Boolean).join("\n");
 }
+var CONTINUATION_SUMMARY_TITLE_ALLOWLIST = /* @__PURE__ */ new Set(["Continuation Summary", "Predecessor Execution Summary"]);
+function continuationSectionTitle(context) {
+  const title = readString(asRecord(context.paperclipContinuationSummary).title);
+  return title && CONTINUATION_SUMMARY_TITLE_ALLOWLIST.has(title) ? title : "Continuation Summary";
+}
 function taskAcceptanceContractError(code, message) {
   const error = new Error(message);
   error.code = code;
@@ -5421,10 +5446,10 @@ function wikiAccessRuleLine(input) {
   const tools = input.hasGovernedMcp === true && access.tools === true;
   const treePath = readString(access.treePath);
   if (tools && treePath) {
-    return `- Company wiki access in this run: the governed tools wiki_search / wiki_read_page / wiki_list_pages / wiki_read_source / wiki_write_page via the amaster MCP, and the wiki tree at ${treePath} (read wiki/index.md there first).`;
+    return `- Company wiki access in this run: the wiki tools wiki_search / wiki_read_page / wiki_list_pages / wiki_read_source / wiki_write_page via the amaster MCP, and the wiki tree at ${treePath} (read wiki/index.md there first).`;
   }
   if (tools) {
-    return "- Company wiki access in this run: the governed tools wiki_search / wiki_read_page / wiki_list_pages / wiki_read_source / wiki_write_page via the amaster MCP. Use them for governed lookup and durable Wiki updates; Company Knowledge operations must use the exact operationId and sourceRefs named by the issue.";
+    return "- Company wiki access in this run: the wiki tools wiki_search / wiki_read_page / wiki_list_pages / wiki_read_source / wiki_write_page via the amaster MCP. Use them for targeted lookup and durable Wiki updates; Company Knowledge operations must use the exact operationId and sourceRefs named by the issue.";
   }
   if (treePath) {
     return `- Company wiki access in this run: the wiki tree at ${treePath}. Read wiki/index.md first (every page listed with a one-line summary), then open the specific pages you need; wiki_* tools are not available in this run.`;
@@ -5542,7 +5567,7 @@ function fixedRules(input, includeIssueLine) {
     wikiAccessRuleLine(input),
     "- Runtime Artifact lineage fields sourceWorkProductId and sourceWorkProductIds accept only current artifact work product ids returned as result.effectResult.workProductId by a succeeded upload_artifact action. Never pass a documentId or revisionId as artifact lineage.",
     "- When all inputs are issue documents and there is no source artifact work product, persist the derived result with upsert_document and do not call upload_artifact for a derived or review artifact.",
-    input.hasGovernedMcp && input.executorKind === "pi" && input.managedMcpToolMode === "proxy_only" ? "- For proxy-only Pi MCP writes, put the complete target argument object directly in actual `mcp` string `args` as strict JSON; escape quotes, backslashes, and control characters. Do not stage or print tool calls. If inner JSON syntax fails, correct it once without changing values; never repeat a possibly accepted call. After `runtime_action.describe`, emit the write." : input.hasGovernedMcp && input.executorKind === "pi" && input.managedMcpToolMode === "hybrid" ? "- For hybrid Pi MCP writes, call direct `runtime_action_describe`, then put long-tail write arguments in `mcp.args` as strict JSON. Never stage, print, or repeat a possibly accepted call." : ""
+    input.hasGovernedMcp && input.executorKind === "pi" && input.managedMcpToolMode === "proxy_only" ? "- For proxy-only Pi MCP writes, put the complete target argument object directly in actual `mcp` string `args` as strict JSON; escape quotes, backslashes, and control characters. Do not stage or print tool calls. If inner JSON syntax fails, correct it once without changing values; never repeat a possibly accepted call. After `runtime_action.describe`, emit the write." : ""
   ].filter(Boolean).join("\n");
 }
 function approvalContinuationText(input) {
@@ -5666,14 +5691,14 @@ function continuationRuntimeActionEnvelope(context) {
   return envelope;
 }
 function managedDirectToolName(input, canonicalName) {
-  if (input.managedMcpToolMode !== "direct_typed" && input.managedMcpToolMode !== "hybrid") return null;
+  if (input.managedMcpToolMode !== "direct_typed") return null;
   const catalog = asRecord(input.managedMcpToolCatalog);
   const tools = Array.isArray(catalog.tools) ? catalog.tools.map(asRecord) : [];
   const match = tools.find((tool) => readString(tool.name) === canonicalName);
   return readString(match?.exposedName) ?? null;
 }
 function managedPiMcpProxyAvailable(input) {
-  return input.managedMcpToolMode === "proxy_only" || input.managedMcpToolMode === "hybrid";
+  return input.managedMcpToolMode === "proxy_only";
 }
 function managedPiMcpProxyToolName(canonicalName) {
   const name = readString(canonicalName);
@@ -5701,7 +5726,7 @@ A standalone continuation action is unavailable in this repair lane. First persi
   }
   if (!input.hasGovernedMcp) {
     return `${heading}
-Runtime Action continuation is unavailable: managed governed MCP capability is missing. Do not guess a tool call.`;
+Runtime Action continuation is unavailable: managed MCP capability is missing. Do not guess a tool call.`;
   }
   const envelope = continuationRuntimeActionEnvelope(asRecord(input.context));
   if (!envelope) {
@@ -5987,15 +6012,15 @@ function piMcpUsageText(input) {
   ].join("\n");
 }
 function piDirectTypedToolsText(input) {
-  if (!input.hasGovernedMcp || input.executorKind !== "pi" || input.managedMcpToolMode !== "direct_typed" && input.managedMcpToolMode !== "hybrid") return "";
+  if (!input.hasGovernedMcp || input.executorKind !== "pi" || input.managedMcpToolMode !== "direct_typed") return "";
   const catalog = asRecord(input.managedMcpToolCatalog);
   const tools = (Array.isArray(catalog.tools) ? catalog.tools : []).map(asRecord).map((tool) => ({ name: readString(tool.exposedName), description: readString(tool.description) })).filter((tool) => tool.name);
   if (tools.length === 0) {
-    return "Direct typed governed tools are unavailable because the run catalog snapshot is empty. Do not guess a proxy or tool name.";
+    return "Direct typed tools are unavailable because the run catalog snapshot is empty. Do not guess a proxy or tool name.";
   }
   return [
-    input.managedMcpToolMode === "hybrid" ? "Use the attested direct typed tools already present in the provider tool definitions with object arguments; do not duplicate them through the `mcp` proxy." : "Use only the attested direct typed tools already present in the provider tool definitions. Call their exact names with object arguments; do not call the `mcp` proxy and do not stringify an inner argument envelope.",
-    input.managedMcpToolMode === "hybrid" ? "For a canonical tool absent from those definitions, first use the direct typed `runtime_action_describe`, then call the single managed `mcp` proxy with stringified inner `args`. Never infer an alias, use REST, or bypass the governed Gateway." : "A tool absent from the provider tool definitions is unavailable in this run. Do not infer a namespace or fall back to REST/bare MCP."
+    "Use only the attested direct typed tools already present in the provider tool definitions. Call their exact names with object arguments; do not call the `mcp` proxy and do not stringify an inner argument envelope.",
+    "A tool absent from the provider tool definitions is unavailable in this run. Do not infer a namespace or fall back to REST/bare MCP."
   ].join("\n");
 }
 function sourceAcquisitionTaskSection(input) {
@@ -6138,7 +6163,7 @@ var CONTEXT_AVAILABILITY_SECTION_TITLES = Object.freeze({
   runtime_decomposition_requirement: "Required Task Decomposition",
   task_context_authority: "Task Context Authority",
   verified_company_context: "Verified Company Context",
-  pi_mcp_usage: "Pi Governed MCP Usage",
+  pi_mcp_usage: "Pi MCP Usage",
   governed_reads: "Governed External Reads",
   optional_task_wiki_context: "Optional Company Wiki Context",
   agent_instructions: "Agent Instructions",
@@ -6375,7 +6400,7 @@ ${resolvedDependencies.details.content}` : ""
     { name: "task", title: "Task Context", priority: 90, sourceRef: taskSourceRefs, originalContent: [taskText, taskCommentRefGuidance(input, taskText)].filter(Boolean).join("\n"), content: includeTask ? [taskText, taskCommentRefGuidance(input, taskText)].filter(Boolean).join("\n") : "", truncationReason: includeTask ? null : "mode_selection" },
     ...taskAcceptanceContract ? [{ name: "task_acceptance_contract", title: "Task Acceptance Contract", priority: 100, ...taskAcceptanceContract }] : [],
     ...governedBusinessState ? [{ name: "governed_business_state", title: "Governed Business State", priority: 99, ...governedBusinessState }] : [],
-    { name: "continuation_summary", title: "Continuation Summary", priority: 97, sourceRef: readString(asRecord(context.paperclipContinuationSummary).key) ?? `issue:${input.issueId ?? "unknown"}`, observedAt: readString(asRecord(context.paperclipContinuationSummary).updatedAt), originalContent: continuationSummary, content: mode === "cold" ? "" : continuationSummary, truncationReason: mode === "cold" ? "mode_selection" : null },
+    { name: "continuation_summary", title: continuationSectionTitle(context), priority: 97, sourceRef: readString(asRecord(context.paperclipContinuationSummary).key) ?? `issue:${input.issueId ?? "unknown"}`, observedAt: readString(asRecord(context.paperclipContinuationSummary).updatedAt), originalContent: continuationSummary, content: mode === "cold" ? "" : continuationSummary, truncationReason: mode === "cold" ? "mode_selection" : null },
     ...resolvedDependencyContent ? [{
       name: "resolved_dependencies",
       title: "Resolved Dependency Outputs",
@@ -6392,7 +6417,7 @@ ${resolvedDependencies.details.content}` : ""
     ...verifiedCompanyContext.content ? [{ name: "verified_company_context", title: "Verified Company Context", priority: 96, sourceRef: verifiedCompanyContext.sourceRef, observedAt: verifiedCompanyContext.observedAt, freshness: { kind: "run_snapshot" }, content: verifiedCompanyContext.content }] : [],
     ...piMcpUsage ? [{
       name: "pi_mcp_usage",
-      title: "Pi Governed MCP Usage",
+      title: "Pi MCP Usage",
       priority: 96,
       sourceRef: "amaster_governed_mcp_proxy_contract",
       content: piMcpUsage
@@ -10097,7 +10122,7 @@ var source_acquisition_compatibility_default = {
 };
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.46";
+var CONNECTOR_VERSION = "0.1.1-beta.47";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = source_acquisition_compatibility_default.profileVersion;
 var SOURCE_ACQUISITION_PROFILE_VERSION = source_acquisition_compatibility_default.profileVersion;

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.46";
+const CONNECTOR_VERSION = "0.1.1-beta.47";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.46",
+  "version": "0.1.1-beta.47",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",