@amaster.ai/employee-runtime-connector 0.1.1-beta.70 → 0.1.1-beta.71

package/dist/amaster-runtime-daemon.mjs

@@ -2939,6 +2939,34 @@ function applyManagedPiToolAllowlist(args, profile) {
     ...args.slice(printArgIndex)
   ];
 }
+function applyManagedPiRunExitClosureArgs(args, profile) {
+  const narrowedArgs = applyManagedPiToolAllowlist(args, profile);
+  const toolAllowlist = Array.isArray(profile?.toolAllowlist) ? profile.toolAllowlist.filter((name) => typeof name === "string" && name) : [];
+  if (toolAllowlist.length === 0 || toolAllowlist.includes("read") || typeof profile?.profileRoot !== "string" || !profile.profileRoot) {
+    return narrowedArgs;
+  }
+  const canonicalPath = (filePath) => {
+    try {
+      return realpathSync2(filePath);
+    } catch {
+      return resolve3(filePath);
+    }
+  };
+  const roleSkillsVisibilityExtension = canonicalPath(resolve3(
+    profile.profileRoot,
+    "extensions",
+    MANAGED_PI_ROLE_SKILLS_VISIBILITY_FILENAME
+  ));
+  const closureArgs = [];
+  for (let index = 0; index < narrowedArgs.length; index += 1) {
+    if (narrowedArgs[index] === "--extension" && typeof narrowedArgs[index + 1] === "string" && canonicalPath(narrowedArgs[index + 1]) === roleSkillsVisibilityExtension) {
+      index += 1;
+      continue;
+    }
+    closureArgs.push(narrowedArgs[index]);
+  }
+  return closureArgs;
+}
 function createManagedPiMcpProfileApi(options = {}) {
   const spawnSyncImpl = typeof options.spawnSync === "function" ? options.spawnSync : spawnSync2;
   const chownSyncImpl = typeof options.chownSync === "function" ? options.chownSync : chownSync2;
@@ -11312,7 +11340,7 @@ var source_acquisition_compatibility_default = {
 };
 
 // src/amaster-runtime-daemon.mjs
-var CONNECTOR_VERSION = "0.1.1-beta.70";
+var CONNECTOR_VERSION = "0.1.1-beta.71";
 var CONNECTOR_CONTRACT_VERSION = "2026-06-04.v1";
 var SOURCE_ACQUISITION_CAPABILITY = source_acquisition_compatibility_default.profileVersion;
 var daemonRequire = createRequire(import.meta.url);
@@ -14601,8 +14629,9 @@ async function executeRunExitClosureTurn(config, inputState, options = {}) {
       executionConfig.runExitClosureBaseline,
       { commandId: state.commandId, runId: commandRunId(command) }
     ) : { status: "not_required" };
-    const closureArgs = executorKind === "pi" ? applyManagedPiToolAllowlist(args, {
-      toolAllowlist: Array.isArray(managedMcpClosureBaseline.toolAllowlist) ? managedMcpClosureBaseline.toolAllowlist : null
+    const closureArgs = executorKind === "pi" ? applyManagedPiRunExitClosureArgs(args, {
+      toolAllowlist: Array.isArray(managedMcpClosureBaseline.toolAllowlist) ? managedMcpClosureBaseline.toolAllowlist : null,
+      profileRoot: readString(asRecord(executionConfig.runExitClosureBaseline).profileRoot)
     }) : args;
     const describeRequired = executorKind !== "pi" || managedMcpClosureBaseline.status !== "restored" || Array.isArray(managedMcpClosureBaseline.toolAllowlist);
     await ingestLog(config, command, "system", "info", "Starting bounded run-exit disposition closure turn", {

package/dist/amaster-runtime.mjs

@@ -6,7 +6,7 @@ import { basename, dirname, join, resolve } from "node:path";
 import { homedir, hostname } from "node:os";
 import { fileURLToPath } from "node:url";
 
-const CONNECTOR_VERSION = "0.1.1-beta.70";
+const CONNECTOR_VERSION = "0.1.1-beta.71";
 
 const CAPABILITIES = [
   "remote_registration",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amaster.ai/employee-runtime-connector",
-  "version": "0.1.1-beta.70",
+  "version": "0.1.1-beta.71",
   "description": "MirrorX runtime connector CLI and daemon",
   "license": "MIT",
   "type": "module",