impel-cli 0.20.8 → 0.20.10

package/RELEASE_NOTES.md

@@ -1,5 +1,25 @@
 # Release notes
 
+## 0.20.10 — Direct-answer continuation surface
+
+- Limits answer-only native agents to the exact answer and resume tools.
+- Removes the unnecessary recovery branch after an authoritative continuation
+  handle exists, keeping healthy long-running answers within four inference
+  rounds while durable profiles retain ambiguous-start recovery.
+- Regenerates managed agent profiles so the eager allowlist matches the
+  fail-closed local MCP surface.
+
+## 0.20.9 — Claude managed-tool permissions
+
+- Lets eager Claude custom agents execute their fixed, tenant-bound MCP tools
+  in non-interactive `dontAsk` sessions without a permission prompt.
+- Scopes prompt bypass to custom agents whose `tools` frontmatter contains only
+  the generated Impel run/resume/recovery allowlist; fallback profiles keep the
+  host's normal permission behavior.
+- Preserves the terminal answer schema, status, and run id in the local result
+  so privacy-safe telemetry and native hosts can distinguish success from a
+  model process that merely exited cleanly.
+
 ## 0.20.8 — Claude direct-answer compatibility
 
 - Publishes the bound direct-answer tool with Claude's supported closed object

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.20.8",
+  "version": "0.20.10",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/agents.js

@@ -51,7 +51,7 @@ export const NATIVE_AGENT_RUN_TOOL = "run_native_agent";
 export const NATIVE_AGENT_RESUME_TOOL = "resume_native_agent_run";
 export const NATIVE_AGENT_RECOVER_TOOL = "recover_native_agent_runs";
 export const MANAGED_AGENT_MCP_SERVER = "impel_agent";
-export const MANAGED_AGENT_MANIFEST_VERSION = 8;
+export const MANAGED_AGENT_MANIFEST_VERSION = 9;
 
 const NATIVE_AGENT_TOOL_NAMES = [
   NATIVE_AGENT_RUN_TOOL,
@@ -61,7 +61,7 @@ const NATIVE_AGENT_TOOL_NAMES = [
 const NATIVE_AGENT_RECOVERY_TOOL_NAMES = [NATIVE_AGENT_RESUME_TOOL, NATIVE_AGENT_RECOVER_TOOL];
 function nativeAgentToolNames(agent) {
   return usesDirectAnswer(agent)
-    ? [NATIVE_AGENT_ANSWER_TOOL, ...NATIVE_AGENT_RECOVERY_TOOL_NAMES]
+    ? [NATIVE_AGENT_ANSWER_TOOL, NATIVE_AGENT_RESUME_TOOL]
     : NATIVE_AGENT_TOOL_NAMES;
 }
 function eagerNativeAgentTransportEnabled() {
@@ -706,7 +706,15 @@ function renderClaudeAgent({ tenantId, agent, name, invocation, recoveryOnly = f
     `description: ${JSON.stringify(description)}`,
     "model: haiku",
     ...(eager
-      ? ["tools:", ...toolNames.map((tool) => `  - ${JSON.stringify(nativeToolName(tool))}`)]
+      ? [
+        // This agent receives only the exact fixed-binding MCP allowlist below,
+        // so bypassing prompts cannot grant filesystem, shell, connector, or
+        // arbitrary MCP access. It lets non-interactive/dontAsk hosts execute
+        // the selected managed adapter instead of auto-denying its sole call.
+        "permissionMode: bypassPermissions",
+        "tools:",
+        ...toolNames.map((tool) => `  - ${JSON.stringify(nativeToolName(tool))}`),
+      ]
       : []),
     "mcpServers:",
     `  - ${MANAGED_AGENT_MCP_SERVER}:`,

package/src/nativeAgentTransport.js

@@ -1735,10 +1735,13 @@ export class NativeAgentCompositeTransport {
       });
       if (result?.schema === NATIVE_AGENT_RESULT_SCHEMA && result.status === "succeeded") {
         return {
+          schema: "impel.native-agent-answer.v1",
+          status: "succeeded",
           forUser: result.finalText,
           answer: result.finalText,
           agentId: this.agentId,
           scopeParam: this.scopeParam,
+          runId: state.upstreamRunId,
         };
       }
       return result;
@@ -2190,7 +2193,11 @@ export function nativeAgentCompositeTools({ mode = "durable" } = {}) {
     },
   ];
   if (mode === "answer") {
-    return [answerTool, ...tools.filter(({ name }) => name !== NATIVE_AGENT_RUN_TOOL)];
+    // A bounded answer either returns terminal text or the authoritative
+    // continuation handle. Once that handle exists, resume is the only valid
+    // next action; exposing recovery here gives the wrapper model an
+    // unnecessary branch and can add a fifth inference round to healthy runs.
+    return [answerTool, tools.find(({ name }) => name === NATIVE_AGENT_RESUME_TOOL)];
   }
   return mode === "recovery" ? tools.filter(({ name }) => name !== NATIVE_AGENT_RUN_TOOL) : tools;
 }