@proagentstore/cli 0.4.126 → 0.4.128

package/dist/browser-runner/coding/engine-check.js

@@ -1,4 +1,5 @@
 import { spawnSync } from "node:child_process";
+import { unwrapLauncher } from "./launcher-wrapper.js";
 import { statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
@@ -66,7 +67,9 @@ export function detectEngineLogin(engine, deps = {}) {
  */
 export function checkEngine(input, deps = {}) {
     const engine = (["claude", "gemini", "codex", "grok", "generic"].includes(input.clientType ?? "") ? input.clientType : "claude");
-    const parsed = parseCommand(input.command);
+    // The ENGINE is what must be installed — after a `pas mcp-auth exec --` wrapper (#1006), not the wrapper.
+    const command = parseCommand(input.command);
+    const parsed = unwrapLauncher(command.bin, command.args);
     const bin = parsed.bin || parseCommand(handlerFor(engine).cliCommand).bin || engine;
     const { binaryPath, via } = resolveEngineSpawn(bin, [], deps);
     const login = input.credentialInjected ? { login: "found", where: "platform" } : detectEngineLogin(engine, deps);

package/dist/browser-runner/coding/headless.js

@@ -1,4 +1,5 @@
 import { InputLedger } from "./input-ledger.js";
+import { spawnTarget, unwrapLauncher } from "./launcher-wrapper.js";
 import { runObjectiveBlock } from "./run-objective.js";
 import { spawn } from "node:child_process";
 import { classifyCommand, commandFromToolInput, fillTargetFromResult, toolCallOk, toolResultMark } from "./engine-acts.js";
@@ -83,6 +84,8 @@ export class HeadlessSession {
     mode;
     adapter;
     cmdBin;
+    /** A launcher wrapper spawned in front of the engine (`pas mcp-auth exec --`), or empty. */
+    cmdPrefix;
     cmdArgs;
     binName;
     /** Wall-clock of the last stdout/stderr byte — drives the persistent-raw idle heuristic. */
@@ -242,7 +245,10 @@ export class HeadlessSession {
     constructor(config) {
         this.config = config;
         this.engineLabel = `${config.clientType}:${config.id}`;
-        const { bin, args } = parseCommand(config.command);
+        // `pas mcp-auth exec -- codex …` (#1006): spawn the wrapper, but drive the engine after `--`.
+        const parsed = parseCommand(config.command);
+        const { prefix, bin, args } = unwrapLauncher(parsed.bin, parsed.args);
+        this.cmdPrefix = prefix;
         // When no explicit command is configured, fall back to THIS engine's default
         // command (codex/gemini/grok/…) — not a hard-coded "claude", which would drive a
         // non-Claude session with the wrong CLI (and mode is already "raw" for it).
@@ -428,7 +434,8 @@ export class HeadlessSession {
         this.buf = "";
         const args = this.adapter.buildLaunchArgs(this.cmdArgs, this.claudeSessionId);
         const env = this.spawnEnv;
-        const launch = resolveEngineSpawn(this.cmdBin, args, { env });
+        const target = spawnTarget(this.cmdPrefix, this.cmdBin, args);
+        const launch = resolveEngineSpawn(target.command, target.args, { env });
         const proc = spawn(launch.command, launch.args, {
             cwd: this.config.workDir,
             env,
@@ -587,7 +594,8 @@ export class HeadlessSession {
             ? buildCodexResumeArgs(this.cmdArgs, resumedCodexThreadId, text)
             : this.adapter.buildTurnArgs(this.cmdArgs, text);
         const env = this.spawnEnv;
-        const launch = resolveEngineSpawn(this.cmdBin, turnArgs, { env });
+        const target = spawnTarget(this.cmdPrefix, this.cmdBin, turnArgs);
+        const launch = resolveEngineSpawn(target.command, target.args, { env });
         const proc = spawn(launch.command, launch.args, {
             cwd: this.config.workDir,
             env,

package/dist/browser-runner/coding/launcher-wrapper.js

@@ -0,0 +1,25 @@
+/**
+ * `pas mcp-auth exec -- <engine …>` (#1006, PAS #356) on the runner.
+ *
+ * The ProAppStore CLI runs a command with the owner's remote PAS MCP credential in that process's
+ * environment only. So the runner must SPAWN the wrapper (it is what supplies the token) while
+ * everything that understands an engine — the adapter choice (`codex exec` → structured), the turn
+ * and resume argument builders, the engine-installed check — works on the ENGINE command after `--`.
+ *
+ * Matched exactly, as in the API (`workers/api/src/lib/coding-command.ts`) and the SDK
+ * (`packages/sdk/src/engine-posture.ts`): `pas` followed by anything other than `mcp-auth exec --`
+ * is not a wrapper, and stays the binary.
+ */
+export const PAS_MCP_AUTH_WRAPPER = ["mcp-auth", "exec", "--"];
+export function unwrapLauncher(bin, args) {
+    const isPas = (bin.split("/").pop() || "").toLowerCase() === "pas";
+    if (!isPas || !PAS_MCP_AUTH_WRAPPER.every((t, k) => args[k] === t) || args.length <= PAS_MCP_AUTH_WRAPPER.length) {
+        return { prefix: [], bin, args: [...args] };
+    }
+    const rest = args.slice(PAS_MCP_AUTH_WRAPPER.length);
+    return { prefix: [bin, ...PAS_MCP_AUTH_WRAPPER], bin: rest[0], args: rest.slice(1) };
+}
+/** What to actually spawn: the wrapper (if any) carrying the engine and its built args. */
+export function spawnTarget(prefix, bin, args) {
+    return prefix.length ? { command: prefix[0], args: [...prefix.slice(1), bin, ...args] } : { command: bin, args: [...args] };
+}

package/dist/browser-runner/local-artifact/contract.js

@@ -28,6 +28,12 @@ export const LOCAL_ARTIFACT_ENGINES = ["claude", "codex"];
 export const LOCAL_ARTIFACT_AUTH_MODES = ["machine", "subscription"];
 export const LOCAL_ARTIFACT_SOURCE_ROLES = ["resume", "profile", "answers"];
 export const REQUIRED_SOURCE_ROLES = ["resume", "profile"];
+/**
+ * The owner's saved answers to earlier blocking questions (#1066), sent by PAGS from the owner's
+ * Profile and given to the CLI as one more citable source under this role. Not a file source: it
+ * never appears in `sources`, `sourceHashes` or a path, and an older runner simply ignores it.
+ */
+export const OWNER_ANSWERS_ROLE = "owner_answers";
 export const LOCAL_ARTIFACT_BLOCK_REASONS = [
     "missing_source",
     "malformed_lead",
@@ -52,7 +58,7 @@ export const LOCAL_ARTIFACT_EVENT_TYPES = [
 ];
 export const LOCAL_ARTIFACT_ENGINE_AUTHS = ["machine-login", "subscription", "api-key", "missing_login", "unknown"];
 export const LOCAL_ARTIFACT_PARSE_ATTEMPTS = ["fenced_json", "balanced_object"];
-export const LOCAL_ARTIFACT_CAPS = { questions: 20, questionChars: 300, sources: 6, sourceBytes: 256 * 1024 };
+export const LOCAL_ARTIFACT_CAPS = { questions: 20, questionChars: 300, sources: 6, sourceBytes: 256 * 1024, ownerAnswers: 30, ownerAnswerChars: 500 };
 /** An id used as a folder name: no separators, no dots, nothing a path could be built out of. */
 export const PATH_SEGMENT = /^[A-Za-z0-9_-]{1,100}$/;
 /** A source path inside the workspace: relative, no `..`, no absolute, no NUL, no backslash. */

package/dist/browser-runner/local-artifact/engine.js

@@ -20,6 +20,7 @@
 import { mergeEnv } from "../coding/engine-env.js";
 import { resolveEngineAuth } from "../coding/engine-auth.js";
 import { finalText as finalTextFromEngine, missingLogin } from "../local-browser/engine.js";
+import { OWNER_ANSWERS_ROLE } from "./contract.js";
 export { missingLogin };
 const PROVIDER_KEYS = ["ANTHROPIC_API_KEY", "OPENAI_API_KEY"];
 const SUBSCRIPTION_TOKEN = "CLAUDE_CODE_OAUTH_TOKEN";
@@ -51,6 +52,10 @@ export function buildArtifactEngineSpec(input) {
     };
 }
 /** The brief. The rules are stated, but the checks in `checkDraft` are what enforce them. */
+/** The owner's saved answers as one source text: a question and its answer per pair (#1066). */
+export function ownerAnswersText(answers) {
+    return answers.map((a) => `Q: ${a.question}\nA: ${a.answer}`).join("\n\n");
+}
 export function tailorPrompt(lead, sources) {
     const l = lead.lead;
     const job = [
@@ -78,6 +83,9 @@ export function tailorPrompt(lead, sources) {
         '- For EVERY factual claim about the owner in either document, add an entry to "claims" with the claim, the source role it comes from, and a short VERBATIM quote copied exactly from that source.',
         "- Every year, email address and phone number you write must appear in the sources.",
         "- Reword and reorder to fit the job; do not add what the sources do not say. Leave out what does not fit.",
+        ...(sources.some((x) => x.role === OWNER_ANSWERS_ROLE)
+            ? [`- <source role="${OWNER_ANSWERS_ROLE}"> holds the owner's own answers to questions asked on earlier applications. They are the owner's facts and preferences: use them, cite them like any source, and do not ask again a question they already answer.`]
+            : []),
         '- If something the application needs is missing or uncertain, do not guess: answer {"status":"needs_human","questions":["…"]} instead.',
         "",
         "Answer shape when you can do it:",

package/dist/browser-runner/local-artifact/runtime.js

@@ -28,8 +28,8 @@ import { join, resolve, sep } from "node:path";
 import { RunnerInputError } from "../errors.js";
 import { redactText, secretEnvValues } from "../local-browser/contract.js";
 import { resolveWorkspacePath } from "../local-browser/runtime.js";
-import { LOCAL_ARTIFACT_AUTH_MODES, LOCAL_ARTIFACT_CAPS, LOCAL_ARTIFACT_ENGINES, LOCAL_ARTIFACT_SOURCE_ROLES, LOCAL_ARTIFACT_TASK_TYPE, PATH_SEGMENT, REQUIRED_SOURCE_ROLES, isHomeRelative, isWorkspaceRelative, parseLocalArtifactLead, } from "./contract.js";
-import { buildArtifactEngineSpec, checkDraft, finalText, missingLogin, observedArtifactAuth, parseDraft, tailorPrompt } from "./engine.js";
+import { LOCAL_ARTIFACT_AUTH_MODES, LOCAL_ARTIFACT_CAPS, OWNER_ANSWERS_ROLE, LOCAL_ARTIFACT_ENGINES, LOCAL_ARTIFACT_SOURCE_ROLES, LOCAL_ARTIFACT_TASK_TYPE, PATH_SEGMENT, REQUIRED_SOURCE_ROLES, isHomeRelative, isWorkspaceRelative, parseLocalArtifactLead, } from "./contract.js";
+import { buildArtifactEngineSpec, checkDraft, finalText, missingLogin, observedArtifactAuth, ownerAnswersText, parseDraft, tailorPrompt } from "./engine.js";
 /** The manifest in every generated folder — what retention reads, and proof the folder is ours. */
 export const ARTIFACT_MANIFEST = ".pags-artifact.json";
 const MAX_EVENTS = 200;
@@ -87,6 +87,18 @@ export function parseArtifactEnvelope(raw) {
         if (uploadedSources.length !== 2 || !uploadedSources.some((s) => s.role === "resume") || !uploadedSources.some((s) => s.role === "profile"))
             throw bad("uploaded sources need one resume and one profile");
     }
+    // The owner's saved answers to earlier questions (#1066): optional, bounded, plain text only.
+    const ownerAnswers = [];
+    if (o.ownerAnswers !== undefined) {
+        if (!Array.isArray(o.ownerAnswers) || o.ownerAnswers.length > LOCAL_ARTIFACT_CAPS.ownerAnswers)
+            throw bad(`ownerAnswers must be a list of at most ${LOCAL_ARTIFACT_CAPS.ownerAnswers}`);
+        for (const a of o.ownerAnswers) {
+            const r = (a && typeof a === "object" ? a : {});
+            if (typeof r.question !== "string" || !r.question.trim() || r.question.length > LOCAL_ARTIFACT_CAPS.questionChars || typeof r.answer !== "string" || !r.answer.trim() || r.answer.length > LOCAL_ARTIFACT_CAPS.ownerAnswerChars)
+                throw bad("each owner answer needs a question and an answer within their caps");
+            ownerAnswers.push({ question: r.question.trim(), answer: r.answer.trim() });
+        }
+    }
     const p = (o.policy && typeof o.policy === "object" ? o.policy : {});
     const retainDays = intIn(p.retainDays, 0, 3650);
     const maxMinutes = intIn(p.maxMinutes, 1, 60);
@@ -104,6 +116,7 @@ export function parseArtifactEnvelope(raw) {
         workspace: o.workspace,
         sources,
         ...(uploadedSources.length ? { uploadedSources } : {}),
+        ...(ownerAnswers.length ? { ownerAnswers } : {}),
         policy: { retainDays, maxMinutes, maxConcurrent },
         ...("lead" in lead ? { lead: lead.lead } : { lead: null, leadError: lead.error }),
     };
@@ -235,6 +248,12 @@ export class LocalArtifactRuntime {
         }
         if (missing.length)
             throw new Pause("missing_source", missing);
+        // The owner's saved answers go in as one more source the CLI may cite (#1066). Not a file, so no
+        // source hash or path; the count alone is recorded, never the text.
+        if (e.ownerAnswers?.length) {
+            texts.push({ role: OWNER_ANSWERS_ROLE, text: ownerAnswersText(e.ownerAnswers) });
+            this.emit(run, { type: "source.read", detail: { role: OWNER_ANSWERS_ROLE, count: e.ownerAnswers.length } });
+        }
         const outRel = `applications/${lead.leadId}/${e.runId}`;
         const outDir = join(workspace, "applications", lead.leadId, e.runId);
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@proagentstore/cli",
-  "version": "0.4.126",
+  "version": "0.4.128",
   "description": "CLI for creating, publishing, and running ProAgentStore agents",
   "license": "MIT",
   "type": "module",