@thecorporation/agent 0.1.0 → 1.0.5

package/README.md

@@ -1,22 +1,24 @@
 # @thecorporation/agent
 
-Corporate governance agent powered by [Pi](https://github.com/nicholasgasior/pi-coding-agent). Adds 35 tools for entity formation, equity management, payroll, compliance, and more.
+Corporate governance agent extension for the [Pi coding agent](https://github.com/nicholasgasior/pi-coding-agent). Adds 36 tools for entity formation, equity management, payroll, compliance, and more.
+
+Part of [The Corporation](https://thecorporation.ai) — agent-native corporate infrastructure.
 
 ## Install
 
 ```bash
-npm i -g @mariozechner/pi-coding-agent @thecorporation/agent
+npm install -g @mariozechner/pi-coding-agent @thecorporation/agent
 ```
 
 ## Usage
 
 ```bash
-corp                        # interactive mode — launches Pi with corporate tools
-corp -p "list entities"     # one-shot mode
-corp -p "form an LLC"       # guided entity formation
+corp-agent                          # interactive mode — launches Pi with corporate tools
+corp-agent -p "list entities"       # one-shot mode
+corp-agent -p "form an LLC"         # guided entity formation
 ```
 
-The `corp` command:
+The `corp-agent` command:
 
 1. Copies the corporate tools extension into your project's `.pi/extensions/`
 2. Seeds `.pi/AGENT.md` with corporate context (only if not already present)
@@ -36,11 +38,68 @@ Create `~/.corp/config.json`:
 
 Or use environment variables: `CORP_API_URL`, `CORP_CONFIG_DIR`.
 
-## What's Included
+## Tools
+
+### Read Tools (auto-approved)
+
+| Tool | Description |
+|---|---|
+| `get_workspace_status` | Workspace summary with entity/document/grant counts |
+| `list_entities` | List all companies in the workspace |
+| `get_cap_table` | Full cap table for an entity |
+| `list_documents` | List documents for an entity |
+| `list_safe_notes` | List SAFE notes for an entity |
+| `list_agents` | List autonomous agents |
+| `get_checklist` | Read the workspace checklist |
+| `get_document_link` | Get a document download/preview link |
+| `get_signing_link` | Generate a signing URL |
+| `list_obligations` | List compliance obligations with urgency tiers |
+| `get_billing_status` | Show billing tier and usage |
+
+### Write Tools (require confirmation)
+
+| Tool | Description |
+|---|---|
+| `form_entity` | Form a new LLC or corporation |
+| `convert_entity` | Convert entity type (e.g. LLC to C-Corp) |
+| `dissolve_entity` | Initiate entity dissolution |
+| `issue_equity` | Issue shares or membership units |
+| `issue_safe` | Issue a SAFE note |
+| `transfer_shares` | Transfer shares between parties |
+| `calculate_distribution` | Calculate and record a distribution |
+| `create_invoice` | Create an invoice |
+| `run_payroll` | Run payroll for a pay period |
+| `submit_payment` | Submit a payment (ACH, wire, check) |
+| `open_bank_account` | Open a business bank account |
+| `reconcile_ledger` | Reconcile the entity ledger |
+| `generate_contract` | Generate a contract from template |
+| `file_tax_document` | File a tax document (1099, K-1, etc.) |
+| `track_deadline` | Track a compliance deadline |
+| `classify_contractor` | Analyze contractor classification risk |
+| `convene_meeting` | Convene a governance meeting |
+| `schedule_meeting` | Schedule a meeting |
+| `cast_vote` | Cast a vote on a meeting agenda item |
+| `update_checklist` | Update the workspace checklist |
+| `create_agent` | Create an autonomous AI agent |
+| `send_agent_message` | Send a message to an agent |
+| `update_agent` | Update agent configuration |
+| `add_agent_skill` | Add a skill to an agent |
+
+## Slash Commands
+
+| Command | Description |
+|---|---|
+| `/status` | Workspace overview |
+| `/entities` | Browse entities interactively |
+| `/cap-table [entity_id]` | View cap table |
+| `/obligations` | Compliance obligations by urgency |
+| `/documents [entity_id]` | List documents with signing status |
+| `/billing` | Billing tier and usage |
+
+## Links
 
-- **30 corporate tools** — entities, equity, documents, finance, compliance, agents
-- **5 slash commands** — `/corp-status`, `/corp-login`, `/corp-switch`, `/corp-entities`, `/corp-agents`
-- **Write-tool confirmation gating** — destructive operations require user approval
+- [thecorporation.ai](https://thecorporation.ai)
+- [GitHub](https://github.com/thecorporationai/thecorporation-mono/tree/main/packages/agent)
 
 ## License
 

package/extension/corp.ts

@@ -75,7 +75,6 @@ const READ_ONLY_TOOLS = new Set([
   "list_safe_notes",
   "list_agents",
   "get_checklist",
-  "get_document_link",
   "get_signing_link",
   "list_obligations",
   "get_billing_status",
@@ -404,7 +403,7 @@ const listObligations = {
     tier: Type.Optional(Type.String({ description: "Filter: overdue, due_today, d1, d7, d14, d30, upcoming" })),
   }),
   async execute(toolCallId: string, params: any, signal: any) {
-    const q = params.tier ? `?tier=${params.tier}` : "";
+    const q = params.tier ? `?tier=${encodeURIComponent(params.tier)}` : "";
     const data = await apiCall("GET", `/v1/obligations/summary${q}`);
     return { content: [{ type: "text" as const, text: JSON.stringify(data) }], details: data };
   },
@@ -1233,27 +1232,38 @@ export default function (pi: ExtensionAPI) {
   // (services/agents, local dev) they remain available.
   const BLOCKED_BUILTIN_TOOLS = new Set(["bash", "write", "edit"]);
   const isHostedWeb = process.env.CORP_TERMINAL === "web";
+  const corpToolNames = new Set(allTools.map((t) => t.name));
+  const headlessWritePolicy = (process.env.CORP_HEADLESS_WRITE_POLICY || "deny").toLowerCase();
 
   // ── Write Tool Confirmation ─────────────────────────────────
   pi.on("tool_call", async (event: any, ctx: any) => {
-    // Headless mode: auto-approve all tool calls
-    if (process.env.CORP_AUTO_APPROVE === "1") return;
-
     const name = event.toolName ?? event.toolCall?.name;
     if (!name) return;
 
-    // Block Pi built-in file write and bash tools in hosted web terminal
-    if (isHostedWeb && BLOCKED_BUILTIN_TOOLS.has(name)) {
+    const isHeadless = process.env.CORP_AUTO_APPROVE === "1" || !ctx?.hasUI;
+
+    // Always block risky built-in mutation tools in hosted and headless contexts.
+    if ((isHostedWeb || isHeadless) && BLOCKED_BUILTIN_TOOLS.has(name)) {
       return {
         block: true,
         reason: `The ${name} tool is not available. Use corporate operations tools instead.`,
       };
     }
 
+    // Headless mode: fail closed for write actions unless explicitly allowed.
+    if (isHeadless) {
+      if (!corpToolNames.has(name)) return;
+      if (READ_ONLY_TOOLS.has(name)) return;
+      if (headlessWritePolicy === "allow") return;
+      return {
+        block: true,
+        reason: "Approval required: mutating actions are blocked in unattended mode.",
+      };
+    }
+
     if (READ_ONLY_TOOLS.has(name)) return; // auto-approve reads
 
     // Only intercept our corp tools
-    const corpToolNames = new Set(allTools.map((t) => t.name));
     if (!corpToolNames.has(name)) return;
 
     const args = event.input ?? event.toolCall?.args ?? {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@thecorporation/agent",
-  "version": "0.1.0",
+  "version": "1.0.5",
   "description": "TheCorporation agent — 35 corporate governance tools for the Pi coding agent",
   "type": "module",
   "bin": {