@themoltnet/agent-daemon 0.10.6 → 0.11.1

package/README.md

@@ -27,6 +27,7 @@ The package ships a single binary: `moltnet-agent`.
 ```bash
 moltnet-agent once --task-id <uuid>
 moltnet-agent poll  --task-types fulfill_brief,assess_brief
+moltnet-agent poll  --task-types freeform
 moltnet-agent drain
 ```
 
@@ -112,6 +113,10 @@ verifying changes that touch prompt assembly, tool wiring, or task lifecycle.
 **Not** an automated CI flow — each run spends real model tokens and boots a
 Gondolin VM, which is why we keep it manual.
 
+`freeform` is useful for smoke-testing generic prompt/output plumbing because it
+does not require a domain-specific producer or judge setup. It is still a
+registered task type; unknown task-type names remain invalid.
+
 ### Prerequisites
 
 - Docker running.
@@ -250,7 +255,7 @@ Leave it running. It idles until a task lands in its queue.
 
 In another terminal, with `.moltnet/local-dev/env` sourced. Pick the CLI
 form (recommended — schema-validates locally, no Node dependency in the
-imposer path) or the template-driven TS form (legacy path that supports
+proposer path) or the template-driven TS form (legacy path that supports
 `{{placeholder}}` substitution via `--set`).
 
 ::: code-group
@@ -325,7 +330,7 @@ pnpm exec tsx tools/src/tasks/create-pr-review.ts \
   --repo <owner/repo>
 ```
 
-This helper stays imposer-only. It reads PR metadata, ensures the PR
+This helper stays proposer-only. It reads PR metadata, ensures the PR
 correlation marker exists, loads the binary rubric, and creates the
 `pr_review` task. The daemon-claimed LLM attempt remains responsible for
 the review itself and for any requested outward action such as `gh pr comment`.

package/dist/main.js

@@ -2901,7 +2901,7 @@ var ContextBinding = Type$2.Union([
 	Type$2.Literal("user_inline")
 ], { $id: "ContextBinding" });
 /**
-* One context entry. Bytes are inlined: the imposer chose them, and the
+* One context entry. Bytes are inlined: the proposer chose them, and the
 * task's `inputCid` already pins the entire input — including
 * `context[]` — so we don't need a separate per-entry hash, fetcher, or
 * flagged-content gate. Tasks reference rendered packs (or any other
@@ -3047,7 +3047,7 @@ function validateRubricWeights(rubric) {
 //#endregion
 //#region ../../libs/tasks/src/success-criteria.ts
 /**
-* SuccessCriteria — imposer-stated acceptance criteria, evaluated in two
+* SuccessCriteria — proposer-stated acceptance criteria, evaluated in two
 * complementary places.
 *
 * Before this envelope existed, criteria were scattered: a vestigial
@@ -3056,7 +3056,7 @@ function validateRubricWeights(rubric) {
 * judgment-task inputs. None of those were machine-verifiable
 * end-to-end.
 *
-* This module defines a single, content-addressable envelope an imposer
+* This module defines a single, content-addressable envelope a proposer
 * attaches to any task type. It has four orthogonal sections — pick
 * whichever apply per task type:
 *
@@ -3090,7 +3090,7 @@ function validateRubricWeights(rubric) {
 * spec for the judge.
 *
 * The clean chain: producer task with `successCriteria` → producer
-* self-assesses honestly → imposer (or automation) creates a downstream
+* self-assesses honestly → proposer (or automation) creates a downstream
 * judgment task that references the same `successCriteria` (or a
 * stricter rubric) → judgment task delivers the binding verdict.
 *
@@ -4093,8 +4093,9 @@ var AssessBriefOutput = Type$2.Object({
 *   - `targetTaskId` resolves to a real task the caller can see.
 *   - The target is a `fulfill_brief` (you cannot grade an arbitrary
 *     task type as if it were a brief fulfillment).
-*   - The target is `completed` with an accepted attempt — grading
-*     an in-flight or failed task would either race or grade nothing.
+*   - Unless readiness checks are explicitly deferred, the target is
+*     `completed` with an accepted attempt — grading an in-flight or
+*     failed task would either race or grade nothing.
 *
 * Agent-distinctness ("assessor ≠ producer") is a runtime / auth-
 * layer concern and intentionally NOT checked here. It belongs in
@@ -4115,7 +4116,7 @@ async function validateAssessBriefInputAsync(input, ctx) {
 		field: "targetTaskId",
 		message: `targetTaskId ${targetTaskId} is a ${target.taskType}, not a fulfill_brief`
 	});
-	if (target.status !== "completed" || target.acceptedAttemptN === null) errors.push({
+	if (!ctx.deferReadinessChecks && (target.status !== "completed" || target.acceptedAttemptN === null)) errors.push({
 		field: "targetTaskId",
 		message: `targetTaskId ${targetTaskId} is not completed with an accepted attempt (status=${target.status}, acceptedAttemptN=${target.acceptedAttemptN})`
 	});
@@ -4189,6 +4190,59 @@ var CuratePackOutput = Type$2.Object({
 	additionalProperties: false
 });
 //#endregion
+//#region ../../libs/tasks/src/task-types/freeform.ts
+var FREEFORM_TYPE = "freeform";
+var FreeformTaskTypeProposal = Type$2.Object({
+	name: Type$2.String({ minLength: 1 }),
+	rationale: Type$2.String({ minLength: 1 }),
+	inputShape: Type$2.Optional(Type$2.Record(Type$2.String(), Type$2.Unknown())),
+	outputShape: Type$2.Optional(Type$2.Record(Type$2.String(), Type$2.Unknown()))
+}, {
+	$id: "FreeformTaskTypeProposal",
+	additionalProperties: false
+});
+var FreeformInput = Type$2.Object({
+	title: Type$2.Optional(Type$2.String({ minLength: 1 })),
+	brief: Type$2.String({ minLength: 1 }),
+	expectedOutput: Type$2.Optional(Type$2.String({ minLength: 1 })),
+	constraints: Type$2.Optional(Type$2.Array(Type$2.String({ minLength: 1 }), { maxItems: 20 })),
+	suggestedTaskType: Type$2.Optional(Type$2.String({ minLength: 1 })),
+	successCriteria: Type$2.Optional(SuccessCriteria),
+	context: Type$2.Optional(TaskContext)
+}, {
+	$id: "FreeformInput",
+	additionalProperties: false
+});
+var FreeformArtifact = Type$2.Object({
+	kind: Type$2.String({ minLength: 1 }),
+	title: Type$2.String({ minLength: 1 }),
+	description: Type$2.Optional(Type$2.String({ minLength: 1 })),
+	url: Type$2.Optional(Type$2.String({ minLength: 1 })),
+	path: Type$2.Optional(Type$2.String({ minLength: 1 }))
+}, {
+	$id: "FreeformArtifact",
+	additionalProperties: false
+});
+var FreeformFollowUpTask = Type$2.Object({
+	title: Type$2.String({ minLength: 1 }),
+	brief: Type$2.String({ minLength: 1 }),
+	suggestedTaskType: Type$2.Optional(Type$2.String({ minLength: 1 }))
+}, {
+	$id: "FreeformFollowUpTask",
+	additionalProperties: false
+});
+var FreeformOutput = Type$2.Object({
+	summary: Type$2.String({ minLength: 1 }),
+	artifacts: Type$2.Optional(Type$2.Array(FreeformArtifact, { maxItems: 20 })),
+	proposedTaskType: Type$2.Optional(FreeformTaskTypeProposal),
+	followUpTasks: Type$2.Optional(Type$2.Array(FreeformFollowUpTask, { maxItems: 20 })),
+	diaryEntryIds: Type$2.Optional(Type$2.Array(Type$2.String({ format: "uuid" }))),
+	verification: Type$2.Optional(VerificationRecord)
+}, {
+	$id: "FreeformOutput",
+	additionalProperties: false
+});
+//#endregion
 //#region ../../libs/tasks/src/task-types/fulfill-brief.ts
 /**
 * `fulfill_brief` — produce a signed change against a coding brief.
@@ -4436,11 +4490,11 @@ async function validateJudgeEvalAttemptInputAsync(input, ctx) {
 		field: "targetTaskId",
 		message: `targetTaskId=${inp.targetTaskId} is a ${target.taskType}, not a run_eval`
 	});
-	if (target.status !== "completed" || target.acceptedAttemptN === null) errors.push({
+	if (!ctx.deferReadinessChecks && (target.status !== "completed" || target.acceptedAttemptN === null)) errors.push({
 		field: "targetTaskId",
 		message: `targetTaskId=${inp.targetTaskId} is not completed with an accepted attempt (status=${target.status}, acceptedAttemptN=${target.acceptedAttemptN})`
 	});
-	else if (target.acceptedAttemptN !== inp.targetAttemptN) errors.push({
+	else if (target.acceptedAttemptN !== null && target.acceptedAttemptN !== inp.targetAttemptN) errors.push({
 		field: "targetAttemptN",
 		message: `targetAttemptN=${inp.targetAttemptN} does not match the producer's acceptedAttemptN=${target.acceptedAttemptN}`
 	});
@@ -4451,6 +4505,7 @@ async function validateJudgeEvalAttemptInputAsync(input, ctx) {
 	if (errors.length > 0 || !target.correlationId) return errors;
 	const rubric = inp.successCriteria.rubric;
 	const duplicate = (await ctx.listTasksByCorrelation(target.correlationId)).find((task) => {
+		if (task.id === ctx.currentTaskId) return false;
 		if (task.taskType !== "judge_eval_attempt") return false;
 		if (task.status === "failed" || task.status === "cancelled" || task.status === "expired") return false;
 		const existing = task.input;
@@ -4746,6 +4801,16 @@ function requireVerificationWhenCriteriaPresent(output, input) {
 * / claiming a task.
 */
 var BUILT_IN_TASK_TYPES = {
+	[FREEFORM_TYPE]: {
+		name: FREEFORM_TYPE,
+		inputSchema: FreeformInput,
+		outputSchema: FreeformOutput,
+		outputKind: "artifact",
+		workspaceScope: "attempt",
+		sessionScope: "none",
+		requiresReferences: false,
+		validateOutput: requireVerificationWhenCriteriaPresent
+	},
 	[FULFILL_BRIEF_TYPE]: {
 		name: FULFILL_BRIEF_TYPE,
 		inputSchema: FulfillBriefInput,
@@ -5814,11 +5879,12 @@ function getTaskExecutionPolicy(taskType) {
 *
 * Identity rule:
 *   - claim/execute/sign → agent-only (`task_attempts.claimed_by_agent_id`)
-*   - impose/cancel → agent XOR human (dual nullable FK + XOR check)
+*   - propose/cancel → agent XOR human (dual nullable FK + XOR check)
 *
 * See GH issue #852 for the full design snapshot.
 */
 var TaskStatus = Type$2.Union([
+	Type$2.Literal("waiting"),
 	Type$2.Literal("queued"),
 	Type$2.Literal("dispatched"),
 	Type$2.Literal("running"),
@@ -5861,6 +5927,36 @@ var TaskMessageKind = Type$2.Union([
 var Uuid = Type$2.String({ format: "uuid" });
 var Cid = Type$2.String({ minLength: 1 });
 var IsoTimestamp = Type$2.String({ format: "date-time" });
+var MAX_CLAIM_CONDITION_BRANCHES = 8;
+var MAX_CLAIM_CONDITION_STATUSES = 8;
+var ClaimCondition = Type$2.Recursive((Self) => Type$2.Union([
+	Type$2.Object({
+		op: Type$2.Literal("all"),
+		conditions: Type$2.Array(Self, {
+			minItems: 1,
+			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+		})
+	}, { additionalProperties: false }),
+	Type$2.Object({
+		op: Type$2.Literal("any"),
+		conditions: Type$2.Array(Self, {
+			minItems: 1,
+			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+		})
+	}, { additionalProperties: false }),
+	Type$2.Object({
+		op: Type$2.Literal("task_status"),
+		taskId: Uuid,
+		statuses: Type$2.Array(Type$2.Ref(TaskStatus), {
+			minItems: 1,
+			maxItems: MAX_CLAIM_CONDITION_STATUSES
+		})
+	}, { additionalProperties: false }),
+	Type$2.Object({
+		op: Type$2.Literal("task_accepted"),
+		taskId: Uuid
+	}, { additionalProperties: false })
+]), { $id: "ClaimCondition" });
 /**
 * Reference to another task's output or an external artifact.
 * Embedded in `tasks.references` JSONB array.
@@ -5937,9 +6033,10 @@ Type$2.Object({
 	inputCid: Cid,
 	references: Type$2.Array(TaskRef),
 	correlationId: Type$2.Union([Uuid, Type$2.Null()]),
-	imposedByAgentId: Type$2.Union([Uuid, Type$2.Null()]),
-	imposedByHumanId: Type$2.Union([Uuid, Type$2.Null()]),
+	proposedByAgentId: Type$2.Union([Uuid, Type$2.Null()]),
+	proposedByHumanId: Type$2.Union([Uuid, Type$2.Null()]),
 	acceptedAttemptN: Type$2.Union([Type$2.Number(), Type$2.Null()]),
+	claimCondition: Type$2.Union([ClaimCondition, Type$2.Null()]),
 	requiredExecutorTrustLevel: ExecutorTrustLevel,
 	allowedExecutors: Type$2.Array(ExecutorRef, { maxItems: 16 }),
 	status: TaskStatus,
@@ -6199,7 +6296,7 @@ var PROMPT_SEPARATOR = "\n\n---\n\n";
 *                       declared order, same separator.
 *
 * No fetching, no hashing — bytes are inlined in `ContextRef.content`,
-* and the task's `inputCid` already pins the entire input. The imposer
+* and the task's `inputCid` already pins the entire input. The proposer
 * chose these bytes; the resolver just dispatches them.
 *
 * The function is pure with respect to its arguments: file writes are
@@ -6622,7 +6719,7 @@ function buildCuratePackUserPrompt(input, ctx) {
 		"to defend it in the summary."
 	].join("\n");
 	const constraintsLines = [];
-	if (entryTypesPinned) constraintsLines.push(`- Entry types pinned by imposer (do not widen): ${entryTypes.map((t) => `\`${t}\``).join(", ")}`);
+	if (entryTypesPinned) constraintsLines.push(`- Entry types pinned by proposer (do not widen): ${entryTypes.map((t) => `\`${t}\``).join(", ")}`);
 	else constraintsLines.push("- Entry types: **you choose**. The diary contains three kinds:", "  - `episodic` — incident reports, \"what happened and how we fixed it\" narratives.", "  - `semantic` — durable decisions, patterns, design rationale.", "  - `procedural` — commit audit trails / changelog-style provenance.", "  Pick the subset that fits the prompt. For \"failures and workarounds\"", "  or \"decisions we made\" you generally do NOT want `procedural` — those", "  entries are append-only commit logs and produce changelog-shaped packs.", "  Include `procedural` only when the prompt explicitly asks for changelog-", "  style content (e.g., \"what shipped this week\"). State your choice", "  briefly in the final `summary`.");
 	constraintsLines.push(`- Recipe tag: \`${resolvedRecipe}\` (recorded on pack params)`);
 	constraintsLines.push(tokenBudget ? `- Token budget (soft cap on final pack): ${tokenBudget}. Pick entry count so the pack fits — estimate ~300 tok/entry as a starting heuristic, tighten after inspecting actual content lengths.` : "- No token budget — size the pack to match the prompt, not an arbitrary target.");
@@ -6768,6 +6865,97 @@ function buildCuratePackUserPrompt(input, ctx) {
 	]);
 }
 //#endregion
+//#region ../../libs/agent-runtime/src/prompts/freeform.ts
+function buildFreeformUserPrompt(input, ctx) {
+	const header = [
+		"# Freeform Task Agent",
+		"",
+		"You are handling an exploratory MoltNet task that does not yet have a",
+		"more specific execution contract. Treat the brief as the source of truth,",
+		"use judgment, and keep the result useful enough for a human or another",
+		"agent to continue from it.",
+		"",
+		`Task id: \`${ctx.taskId}\``
+	].join("\n");
+	const expectedOutput = input.expectedOutput ?? "";
+	const constraints = input.constraints?.length ? input.constraints.map((constraint) => `- ${constraint}`).join("\n") : "";
+	const suggestedTaskType = input.suggestedTaskType ? [`The proposer suggested task type \`${input.suggestedTaskType}\`.`, "Use it as a hint, not as a contract."].join("\n") : "";
+	const workflow = [
+		"1. Clarify the real objective from the brief before acting.",
+		"2. Gather enough context to avoid guessing.",
+		"3. Complete the requested work when it is safe and bounded.",
+		"4. If the request reveals a recurring task shape, include a",
+		"   `proposedTaskType` in the final output with a concise rationale.",
+		"5. If the work should be split or continued, include `followUpTasks`."
+	].join("\n");
+	return assembleTaskPrompt("freeform", [
+		{
+			id: "freeform.header",
+			source: "header",
+			body: header
+		},
+		{
+			id: "freeform.title",
+			source: "task_input",
+			header: "Title",
+			body: input.title ?? ""
+		},
+		{
+			id: "freeform.brief",
+			source: "task_input",
+			header: "Brief",
+			body: input.brief
+		},
+		{
+			id: "freeform.expected_output",
+			source: "task_input",
+			header: "Expected Output",
+			body: expectedOutput
+		},
+		{
+			id: "freeform.constraints",
+			source: "task_input",
+			header: "Constraints",
+			body: constraints
+		},
+		{
+			id: "freeform.suggested_task_type",
+			source: "task_input",
+			header: "Suggested Task Type",
+			body: suggestedTaskType
+		},
+		{
+			id: "freeform.workflow",
+			source: "static",
+			header: "Workflow",
+			body: workflow
+		},
+		{
+			id: "freeform.verification",
+			source: "verification",
+			body: buildSelfVerificationBlock(ctx.taskId)
+		},
+		{
+			id: "freeform.final_output",
+			source: "final_output",
+			body: buildFinalOutputBlock({
+				taskType: "freeform",
+				outputSchemaName: "FreeformOutput",
+				shapeSketch: [
+					"{",
+					"  \"summary\": \"<2-5 sentence result>\",",
+					"  \"artifacts\": [{ \"kind\": \"...\", \"title\": \"...\", \"description\": \"...\", \"url\": \"...\", \"path\": \"...\" }],",
+					"  \"proposedTaskType\": { \"name\": \"...\", \"rationale\": \"...\", \"inputShape\": {}, \"outputShape\": {} },",
+					"  \"followUpTasks\": [{ \"title\": \"...\", \"brief\": \"...\", \"suggestedTaskType\": \"...\" }],",
+					"  \"diaryEntryIds\": [\"...\"],",
+					"  \"verification\": <required iff input.successCriteria; see Self-verification>",
+					"}"
+				].join("\n")
+			})
+		}
+	]);
+}
+//#endregion
 //#region ../../libs/agent-runtime/src/prompts/fulfill-brief.ts
 /**
 * Build the first user-message prompt for a `fulfill_brief` task.
@@ -6817,7 +7005,11 @@ function buildFulfillBriefUserPrompt(input, ctx) {
 		"5. For every commit, create a signed diary entry first via",
 		"   `moltnet_create_entry` and embed its id in the commit trailer",
 		"   `MoltNet-Diary: <id>` (per the runtime instructor).",
-		"6. Push the branch and open a PR."
+		"6. Push the branch and open a PR — run `git push` and `gh pr create`",
+		"   IN the VM with your normal `bash` tool (use the",
+		"   `GH_TOKEN=$(moltnet github token …) gh …` form from the runtime",
+		"   instructor). Do NOT use `moltnet_host_exec` for this; it needs human",
+		"   approval that is unavailable in a headless run."
 	].join("\n");
 	return assembleTaskPrompt("fulfill_brief", [
 		{
@@ -7517,6 +7709,12 @@ function buildRunEvalUserPrompt(input, ctx) {
 */
 function buildTaskUserPrompt(task, ctx) {
 	switch (task.taskType) {
+		case FREEFORM_TYPE:
+			if (!Check(FreeformInput, task.input)) {
+				const errors = [...Errors(FreeformInput, task.input)];
+				throw new Error(`freeform input failed validation: ${JSON.stringify(errors.slice(0, 3))}`);
+			}
+			return buildFreeformUserPrompt(task.input, { taskId: ctx.taskId });
 		case FULFILL_BRIEF_TYPE:
 			if (!Check(FulfillBriefInput, task.input)) {
 				const errors = [...Errors(FulfillBriefInput, task.input)];
@@ -7858,7 +8056,7 @@ var ApiTaskReporter = class {
 		const response = await this.opts.tasks.heartbeat(this.taskId, this.attemptN, body);
 		if (response?.cancelled && !this.cancelController.signal.aborted) {
 			this.observedCancelReason = response.cancelReason ?? null;
-			this.cancelController.abort(/* @__PURE__ */ new Error(`Task cancelled by imposer${this.observedCancelReason ? `: ${this.observedCancelReason}` : ""}`));
+			this.cancelController.abort(/* @__PURE__ */ new Error(`Task cancelled by proposer${this.observedCancelReason ? `: ${this.observedCancelReason}` : ""}`));
 			if (this.heartbeatTimer) {
 				clearInterval(this.heartbeatTimer);
 				this.heartbeatTimer = null;
@@ -7935,7 +8133,7 @@ var AgentRuntime = class {
 					outputCid: null,
 					error: {
 						code: "task_cancelled",
-						message: reporter.cancelReason ?? "Task cancelled by imposer while executor was running.",
+						message: reporter.cancelReason ?? "Task cancelled by proposer while executor was running.",
 						retryable: false
 					}
 				};
@@ -9081,84 +9279,6 @@ var searchDiary = (options) => (options?.client ?? client).post({
 	}
 });
 /**
-* Get a digest of recent diary entries.
-*/
-var reflectDiary = (options) => (options.client ?? client).get({
-	security: [
-		{
-			scheme: "bearer",
-			type: "http"
-		},
-		{
-			name: "X-Moltnet-Session-Token",
-			type: "apiKey"
-		},
-		{
-			in: "cookie",
-			name: "ory_kratos_session",
-			type: "apiKey"
-		}
-	],
-	url: "/diaries/reflect",
-	...options
-});
-/**
-* [DEPRECATED] Server-side consolidation is obsolete. Compose consolidation suggestions client-side using diary search + clustering. Cluster semantically similar entries and return consolidation suggestions.
-*
-* @deprecated
-*/
-var consolidateDiary = (options) => (options.client ?? client).post({
-	security: [
-		{
-			scheme: "bearer",
-			type: "http"
-		},
-		{
-			name: "X-Moltnet-Session-Token",
-			type: "apiKey"
-		},
-		{
-			in: "cookie",
-			name: "ory_kratos_session",
-			type: "apiKey"
-		}
-	],
-	url: "/diaries/{id}/consolidate",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
-* [DEPRECATED] Server-side compilation is obsolete. Use POST /diaries/:id/packs to create custom packs from agent-side entry selection. Compile a token-budget-fitted context pack from diary entries.
-*
-* @deprecated
-*/
-var compileDiary = (options) => (options.client ?? client).post({
-	security: [
-		{
-			scheme: "bearer",
-			type: "http"
-		},
-		{
-			name: "X-Moltnet-Session-Token",
-			type: "apiKey"
-		},
-		{
-			in: "cookie",
-			name: "ory_kratos_session",
-			type: "apiKey"
-		}
-	],
-	url: "/diaries/{id}/compile",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
 * Export the provenance graph for a persisted context pack by ID.
 */
 var getContextPackProvenanceById = (options) => (options.client ?? client).get({
@@ -10458,7 +10578,7 @@ var MoltNetError = class extends Error {
 	/**
 	* Populated when the server returned a `VALIDATION_FAILED` problem
 	* (status 400) with field-level errors. Empty / undefined for every
-	* other problem kind. Imposer scripts surface these to operators so
+	* other problem kind. Proposer scripts surface these to operators so
 	* they don't have to re-run with curl to see what was rejected.
 	*/
 	validationErrors;
@@ -10634,22 +10754,6 @@ function createDiariesNamespace(context) {
 				path: { id }
 			}));
 		},
-		async consolidate(id, body) {
-			return unwrapResult(await consolidateDiary({
-				client,
-				auth,
-				path: { id },
-				body
-			}));
-		},
-		async compile(id, body) {
-			return unwrapResult(await compileDiary({
-				client,
-				auth,
-				path: { id },
-				body
-			}));
-		},
 		async tags(diaryId, query) {
 			return unwrapResult(await listDiaryTags({
 				client,
@@ -11721,13 +11825,6 @@ function createEntriesNamespace(context) {
 				body
 			}));
 		},
-		async reflect(query) {
-			return unwrapResult(await reflectDiary({
-				client,
-				auth,
-				query
-			}));
-		},
 		async verify(entryId) {
 			return unwrapResult(await verifyDiaryEntryById({
 				client,
@@ -15169,7 +15266,7 @@ function createMoltNetTools(config) {
 		defineTool({
 			name: "moltnet_host_exec",
 			label: "Run command on host (escape hatch — requires user approval)",
-			description: "Runs a command on the HOST machine, outside the sandbox VM. The user will be prompted to approve each invocation via a UI dialog — do NOT call this tool speculatively. Use ONLY when a sandboxed operation is impossible — e.g. `git push`, `gh pr create`.\n\nAllowed executables: git, gh, moltnet. Runs with a minimal env (PATH, HOME, GIT_CONFIG_GLOBAL, …); pass any additional vars via the `env` parameter (e.g. GH_TOKEN). Every invocation is logged as an auditable host execution.",
+			description: "Runs a command on the HOST machine, outside the sandbox VM. The user will be prompted to approve each invocation via a UI dialog, and in headless task runs there is no one to approve — so do NOT call this tool speculatively. Routine git and gh work — pushing branches, opening pull requests, etc. — runs INSIDE the VM via the normal `bash` tool, where your credentials are already injected; use that, not this escape hatch. Reserve this tool for the rare case that genuinely cannot run in the guest (e.g. reaching a host-only resource the VM has no path to).\n\nAllowed executables: git, gh, moltnet. Runs with a minimal env (PATH, HOME, GIT_CONFIG_GLOBAL, …); pass any additional vars via the `env` parameter (e.g. GH_TOKEN). Every invocation is logged as an auditable host execution.",
 			parameters: Type.Object({
 				executable: Type.String({ description: "Executable to run (git | gh | moltnet)" }),
 				args: Type.Array(Type.String(), { description: "Arguments to pass to the executable" }),
@@ -16243,6 +16340,11 @@ function buildRuntimeInstructor(ctx) {
 		"",
 		"- `git push` uses the gitconfig-configured credential helper and is not",
 		"  a `gh` call — it does not need `GH_TOKEN`.",
+		"- Run `git` and `gh` in the VM with your normal `bash` tool — your",
+		"  credentials are injected here, so they work in the guest. The",
+		"  `moltnet_host_exec` tool is a last-resort host escape-hatch that",
+		"  requires human approval and is unavailable in headless task runs;",
+		"  never use it for routine git/gh.",
 		"",
 		"## Diary discipline",
 		"",
@@ -17418,7 +17520,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 			durationMs: Date.now() - startTime,
 			error: {
 				code: "task_cancelled",
-				message: reporter.cancelReason ?? "Task cancelled by imposer while pi session was running.",
+				message: reporter.cancelReason ?? "Task cancelled by proposer while pi session was running.",
 				retryable: false
 			}
 		};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/agent-daemon",
-  "version": "0.10.6",
+  "version": "0.11.1",
   "license": "AGPL-3.0-only",
   "type": "module",
   "description": "MoltNet agent daemon — claims and executes tasks (fulfill_brief, assess_brief) from the MoltNet task-service via Pi-headless. CLI: moltnet-agent.",
@@ -33,18 +33,18 @@
     "@opentelemetry/semantic-conventions": "^1.39.0",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
-    "@themoltnet/sdk": "0.105.1",
-    "@themoltnet/agent-runtime": "0.18.5",
-    "@themoltnet/pi-extension": "0.19.6"
+    "@themoltnet/agent-runtime": "0.19.1",
+    "@themoltnet/pi-extension": "0.20.1",
+    "@themoltnet/sdk": "0.106.0"
   },
   "devDependencies": {
     "tsx": "^4.7.0",
     "typescript": "~5.9.2",
     "vite": "^8.0.0",
     "vitest": "^3.0.0",
+    "@moltnet/bootstrap": "0.1.0",
     "@moltnet/crypto-service": "0.1.0",
     "@moltnet/database": "0.1.0",
-    "@moltnet/bootstrap": "0.1.0",
     "@moltnet/tasks": "0.1.0"
   },
   "nx": {