@amaster.ai/employee-runtime-connector 0.1.1-beta.47 → 0.1.1-beta.48

package/dist/amaster-runtime-daemon.mjs

@@ -3017,6 +3017,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && !sourceAcquisitionCatalog && !diagnosisCatalog && !fullCatalog) {
       throw new Error("pi_managed_mcp_invalid: direct tool catalog size mismatch");
     }
+    const catalogKind = sourceAcquisitionCatalog ? "source_acquisition" : diagnosisCatalog ? "diagnosis" : "full";
     const admittedToolNames = sourceAcquisitionCatalog ? SOURCE_ACQUISITION_DIRECT_TYPED_V1_TOOL_NAMES : diagnosisCatalog ? /* @__PURE__ */ new Set([...DIRECT_TYPED_V1_TOOL_NAMES, ...DIAGNOSIS_WIKI_READ_DIRECT_TYPED_V1_TOOL_NAMES]) : FULL_DIRECT_TYPED_V1_TOOL_NAMES;
     const names = /* @__PURE__ */ new Set();
     const exposedNames = /* @__PURE__ */ new Set();
@@ -3066,7 +3067,7 @@ function createManagedPiMcpProfileApi(options = {}) {
     if (catalog.setHash !== setHash) {
       throw new Error("pi_managed_mcp_invalid: direct tool catalog set hash mismatch");
     }
-    return { setHash, tools: normalized.sort((left, right) => left.name.localeCompare(right.name)) };
+    return { setHash, tools: normalized.sort((left, right) => left.name.localeCompare(right.name)), kind: catalogKind };
   }
   function resolvePiExecutablePath(executorCommand, env) {
     if (isAbsolute2(executorCommand) || executorCommand.includes("/") || executorCommand.includes("\\")) {
@@ -3832,7 +3833,10 @@ ${result3.stderr ?? ""}`, "Pi", MINIMUM_PI_VERSION);
         skillArgs,
         spawnIdentity,
         workspaceMcpConfigPath,
-        toolAllowlist: mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE ? [...directToolNames] : null,
+        // Only narrowed specialized catalogs (diagnosis/source-acquisition) pin
+        // the run to the governed tool set. The full catalog is additive: an
+        // ordinary run keeps Pi's native tools plus the direct governed tools.
+        toolAllowlist: mcpToolMode === MANAGED_PI_DIRECT_TYPED_MCP_TOOL_MODE && directCatalog.kind !== "full" ? [...directToolNames] : null,
         protectedValues: [.../* @__PURE__ */ new Set([
           sessionToken,
           ...sharedRuntime.protectedValues,
@@ -10122,7 +10126,7 @@ var source_acquisition_compatibility_default = {
 };
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.47";
+var CONNECTOR_VERSION = "0.1.1-beta.48";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = source_acquisition_compatibility_default.profileVersion;
 var SOURCE_ACQUISITION_PROFILE_VERSION = source_acquisition_compatibility_default.profileVersion;

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.47";
+const CONNECTOR_VERSION = "0.1.1-beta.48";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.47",
+  "version": "0.1.1-beta.48",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",