@cortexkit/pi-magic-context 0.49.22 → 0.49.23

package/dist/historian-calibration-extension.js

@@ -7,7 +7,7 @@ import {
   ceilProviderOutputTokens2,
   withoutProviderTemperature2,
   historianCalibrationExtension
-} from "./index-fa485mqs.js";
+} from "./index-0b5kqg7n.js";
 import"./index-4knyh1kt.js";
 import"./index-6x556c2q.js";
 import"./index-fgs78jyd.js";

package/dist/{index-fa485mqs.js → index-0b5kqg7n.js}

@@ -404,6 +404,41 @@ class SubagentTelemetry {
   }
 }
 
+// src/subagent-tool-boundary.ts
+var SUBAGENT_TOOL_ALLOWLIST_FLAG = "magic-context-tool-allowlist";
+var OMP_CHILD_TOOL_CONFIG = `tools:
+  xdev: false
+plan:
+  enabled: false
+  defaultOnStartup: false
+`;
+function registerSubagentToolBoundary(pi) {
+  pi.registerFlag(SUBAGENT_TOOL_ALLOWLIST_FLAG, {
+    description: "Exact active tool names for a Magic Context hidden child.",
+    type: "string"
+  });
+  pi.on("session_start", async () => {
+    const value = pi.getFlag(SUBAGENT_TOOL_ALLOWLIST_FLAG);
+    if (value === undefined)
+      return;
+    try {
+      const names = typeof value === "string" ? JSON.parse(value) : null;
+      if (!Array.isArray(names) || !names.every((name) => typeof name === "string")) {
+        throw new Error("Invalid Magic Context child tool allowlist");
+      }
+      await pi.setActiveTools(names);
+      const allowed = new Set(names);
+      if (pi.getActiveTools().some((name) => !allowed.has(name))) {
+        throw new Error("Host activated tools outside the Magic Context child allowlist");
+      }
+    } catch (error) {
+      process.stderr.write(`Magic Context child tool restriction failed: ${String(error)}
+`);
+      process.exit(1);
+    }
+  });
+}
+
 // src/historian-calibration-extension.ts
 var HISTORIAN_TEMPERATURE_ENV2 = "MAGIC_CONTEXT_HISTORIAN_TEMPERATURE";
 var HISTORIAN_CACHE_TAIL_ENV2 = "MAGIC_CONTEXT_HISTORIAN_CACHE_TAIL";
@@ -517,6 +552,7 @@ function withoutProviderTemperature2(payload) {
   return clean;
 }
 function historianCalibrationExtension(pi) {
+  registerSubagentToolBoundary(pi);
   if (process.env[HISTORIAN_CACHE_TAIL_ENV2] === "skip") {
     let requests = 0;
     let warned = false;
@@ -577,4 +613,4 @@ function historianCalibrationExtension(pi) {
   });
 }
 
-export { DREAMER_PRIMER_INVESTIGATOR_ALLOWED_TOOLS, buildHiddenAgentRegistrations, logTemperatureDecision, readHostSystemPrompt, subagentStepCap, SubagentTelemetry, HISTORIAN_TEMPERATURE_ENV2, HISTORIAN_CACHE_TAIL_ENV2, HISTORIAN_MAX_OUTPUT_TOKENS_ENV2, SUBAGENT_OUTPUT_CEILING_ENV2, calibrateHistorianProviderPayload2, ceilProviderOutputTokens2, withoutProviderTemperature2, historianCalibrationExtension };
+export { DREAMER_PRIMER_INVESTIGATOR_ALLOWED_TOOLS, buildHiddenAgentRegistrations, logTemperatureDecision, readHostSystemPrompt, subagentStepCap, SubagentTelemetry, OMP_CHILD_TOOL_CONFIG, HISTORIAN_TEMPERATURE_ENV2, HISTORIAN_CACHE_TAIL_ENV2, HISTORIAN_MAX_OUTPUT_TOKENS_ENV2, SUBAGENT_OUTPUT_CEILING_ENV2, calibrateHistorianProviderPayload2, ceilProviderOutputTokens2, withoutProviderTemperature2, historianCalibrationExtension };

package/dist/index.js

@@ -791,10 +791,11 @@ import {
   readHostSystemPrompt,
   subagentStepCap,
   SubagentTelemetry,
+  OMP_CHILD_TOOL_CONFIG,
   HISTORIAN_CACHE_TAIL_ENV2,
   HISTORIAN_MAX_OUTPUT_TOKENS_ENV2,
   SUBAGENT_OUTPUT_CEILING_ENV2
-} from "./index-fa485mqs.js";
+} from "./index-0b5kqg7n.js";
 import {
   PI_CONTEXT_BUDGET,
   PiContextDeadlineError,
@@ -3554,7 +3555,7 @@ function startHostStallProfilerSwitch() {
 // package.json
 var package_default = {
   name: "@cortexkit/pi-magic-context",
-  version: "0.49.22",
+  version: "0.49.23",
   type: "module",
   description: "Pi and OMP coding agent extension for Magic Context — cross-session memory and context management",
   main: "dist/index.js",
@@ -21077,6 +21078,7 @@ class PiSubagentRunner {
     const deliverViaStdin = !rpcBudget && (promptBytes > PROMPT_ARGV_MAX_BYTES || this.platform === "win32");
     let systemPromptTempDir;
     let systemPromptPath;
+    let ompToolConfigPath;
     const cleanupSystemPromptFile = () => {
       if (!systemPromptTempDir)
         return;
@@ -21097,13 +21099,24 @@ class PiSubagentRunner {
         return failBeforeSpawn("spawn_failed", `failed to prepare pi system prompt file: ${error instanceof Error ? error.message : String(error)}`);
       }
     }
-    if (rpcBudget && !systemPromptTempDir) {
+    if ((rpcBudget || this.invocation.targetHarness === "omp") && !systemPromptTempDir) {
       try {
         systemPromptTempDir = mkdtempSync2(join10(tmpdir2(), "mc-pi-prompt-"));
       } catch (error) {
         return failBeforeSpawn("spawn_failed", `failed to prepare pi budget guard: ${error instanceof Error ? error.message : String(error)}`);
       }
     }
+    if (this.invocation.targetHarness === "omp") {
+      try {
+        if (!systemPromptTempDir)
+          throw new Error("child temp directory is unavailable");
+        ompToolConfigPath = join10(systemPromptTempDir, "tool-boundary.yml");
+        writeFileSync4(ompToolConfigPath, OMP_CHILD_TOOL_CONFIG, "utf8");
+      } catch (error) {
+        cleanupSystemPromptFile();
+        return failBeforeSpawn("spawn_failed", `failed to prepare OMP child tool config: ${String(error)}`);
+      }
+    }
     const budgetGuardFile = rpcBudget && systemPromptTempDir ? join10(systemPromptTempDir, "budget-guard") : undefined;
     if (budgetGuardFile) {
       try {
@@ -21120,6 +21133,7 @@ class PiSubagentRunner {
       hostToolNames: this.readHostToolNames(),
       omitPositionalMessage: deliverViaStdin || rpcBudget,
       systemPromptPath,
+      ompToolConfigPath,
       modelRef: modelRefOverride,
       rpc: rpcBudget
     });
@@ -21812,6 +21826,10 @@ var PROMPT_ARGV_MAX_BYTES = 96 * 1024;
 function buildArgs(options, opts) {
   const targetHarness = opts?.targetHarness ?? resolvePiHarnessKind();
   const ompTarget = targetHarness === "omp";
+  const ompToolConfigPath = opts?.ompToolConfigPath;
+  if (ompTarget && !ompToolConfigPath) {
+    throw new Error("OMP child requires a tool-boundary config overlay");
+  }
   const args = [
     ...opts?.rpc ? [] : ["--print"],
     "--mode",
@@ -21820,6 +21838,9 @@ function buildArgs(options, opts) {
     "--no-skills",
     ...ompTarget ? ["--no-rules"] : ["--no-prompt-templates", "--no-context-files"]
   ];
+  if (ompTarget && ompToolConfigPath) {
+    args.push("--config", ompToolConfigPath);
+  }
   if (opts?.disableDiscoveredExtensions || opts?.subagentExtensions !== undefined) {
     args.push("--no-extensions");
   }
@@ -21836,17 +21857,24 @@ function buildArgs(options, opts) {
       args.push("--magic-context-dreamer-actions");
     }
   }
-  const historianCalibrationEntryPath = opts?.historianCalibrationEntryPath === undefined ? HISTORIAN_CALIBRATION_ENTRY_PATH : opts.historianCalibrationEntryPath;
-  if (subagentStepCap(options.agent) !== undefined && historianCalibrationEntryPath) {
+  const historianCalibrationEntryPath = opts?.historianCalibrationEntryPath === undefined ? HISTORIAN_CALIBRATION_ENTRY_PATH ?? (ompTarget ? resolveSiblingEntryPath("historian-calibration-extension.ts") : undefined) : opts.historianCalibrationEntryPath;
+  if (ompTarget && !historianCalibrationEntryPath) {
+    throw new Error("OMP child requires the tool-boundary startup extension");
+  }
+  if ((ompTarget || subagentStepCap(options.agent) !== undefined) && historianCalibrationEntryPath) {
     args.push("--extension", historianCalibrationEntryPath);
   }
   const strictTools = STRICT_TOOL_ALLOWLIST.get(options.agent);
+  let activeToolNames = [];
   if (strictTools === undefined) {
     sessionLog2(options.accountingSessionId ?? "pi-subagent", `Pi subagent agent "${options.agent}" has no strict tool allow-list; forcing --no-tools`);
     args.push("--no-tools");
   } else {
     const resolution = resolveHostToolAllowlistDetails(strictTools, ompTarget, ompTarget ? opts?.hostToolNames : undefined);
     const hostTools = resolution.tools;
+    activeToolNames = [
+      ...new Set(strictTools.map((tool) => ompTarget ? OMP_TOOL_ALIASES[tool] ?? tool : tool).filter((tool) => !resolution.dropped.includes(tool)))
+    ];
     for (const tool of resolution.dropped) {
       const warningKey = `${options.agent}\x00${tool}`;
       if (loggedUnavailableBuiltinTools.has(warningKey))
@@ -21861,6 +21889,9 @@ function buildArgs(options, opts) {
       args.push("--no-tools");
     }
   }
+  if (ompTarget) {
+    args.push("--magic-context-tool-allowlist", JSON.stringify(activeToolNames));
+  }
   if (opts?.systemPromptPath) {
     args.push("--system-prompt", opts.systemPromptPath);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@cortexkit/pi-magic-context",
-	"version": "0.49.22",
+	"version": "0.49.23",
 	"type": "module",
 	"description": "Pi and OMP coding agent extension for Magic Context — cross-session memory and context management",
 	"main": "dist/index.js",