@themoltnet/agent-daemon 0.31.0 → 0.32.0

package/dist/main.js

@@ -4392,6 +4392,68 @@ _Object_({
 	additionalProperties: false
 });
 //#endregion
+//#region ../../libs/tasks/src/runtime-profile-context-recipes.ts
+var RUNTIME_PROFILE_CONTEXT_CATALOGUE = {
+	version: 1,
+	fragments: {
+		"accountable-delivery-v1": {
+			binding: "prompt_prefix",
+			content: "# Accountable delivery\n\n- Pair every commit made during this task with a signed diary entry created by the `moltnet_create_entry` custom tool. Put the returned id in a `MoltNet-Diary: <id>` commit trailer.\n- Keep commit signing enabled; do not bypass the agent git configuration.\n- Push a branch and open or update a pull request only when the task asks for it. For GitHub mutations, use the credential-bound `GH_TOKEN` command form required by the runtime kernel.\n- Keep changes, commits, and any requested pull request coherent enough to review independently.",
+			slug: "accountable-delivery-v1"
+		},
+		"judgment-diary-v1": {
+			binding: "prompt_prefix",
+			content: "# Judgment diary discipline\n\n- For an `assess_brief`, `judge_pack`, or `pr_review` task, create a signed diary entry with the `moltnet_create_entry` custom tool before submitting the structured judgment. Capture the rationale and evidence that support the verdict.\n- Add the `judgment` tag and the active task type tag (`assess_brief`, `judge_pack`, or `pr_review`). For `judge_pack`, also add `rubric:<rubricId>` from the task facts.\n- Do not use a shell `moltnet entry` command: task provenance is injected only by the custom tool.",
+			slug: "judgment-diary-v1"
+		},
+		"proactive-memory-v1": {
+			binding: "prompt_prefix",
+			content: "# Proactive memory use\n\n- Before non-trivial investigation, debugging, code changes, or review, check the task diary for relevant prior knowledge instead of waiting for a human to ask. Use `moltnet_diary_tags` for cheap reconnaissance, `moltnet_list_entries` when tags or task provenance are known, and `moltnet_search_entries` for semantic similarity. Do not search randomly: pass `taskFilter` for task-local or correlation-local queries, and pass `tags` / `entryTypes` for broader prior-knowledge queries using known tags such as `incident`, `decision`, or `scope:<area>`. Broaden only after constrained searches miss.\n- Before creating an `episodic` incident entry, search for similar incidents using the proposed title, root cause, error text, affected subsystem, and watch-for terms, filtered by `entryTypes: [\"episodic\", \"semantic\"]` and any known `scope:*` or task-provenance tags. If a close prior match exists, do not create an isolated duplicate: reference the prior entry in your response or diary content, update or link it when the new occurrence adds material evidence, or create a new recurrence entry only when the recurrence itself is important signal.\n- When you create a recurrence entry, include the prior matching entry id(s) in the content and explain what is new about this occurrence.",
+			slug: "proactive-memory-v1"
+		},
+		"run-eval-direct-v1": {
+			binding: "prompt_prefix",
+			content: "# Direct evaluation run\n\nThe supplied scenario, typed task facts, injected context, and registered submit-output tool are the complete task contract. Do not search diaries, create diary entries, modify a repository, commit, branch, push, or open a pull request unless a task fact explicitly requires it. Submit the agent-authored payload in the first turn; correction turns exist only to recover a rejected or missing submission.",
+			slug: "run-eval-direct-v1"
+		},
+		"task-diary-discipline-v1": {
+			binding: "prompt_prefix",
+			content: "# Task diary discipline\n\n- During a daemon task, create diary entries only through the `moltnet_create_entry` custom tool. It binds entries to the current task diary and injects task, type, attempt, and correlation provenance tags.\n- Do not shell out to `moltnet entry create`, `moltnet entry create-signed`, or any other `moltnet entry` subcommand from bash while a task is running. Those paths bypass the custom tool's task-tag injection, so task-filtered diary queries cannot find the entry.\n- You may add useful tags, but do not try to replace task provenance supplied by the runtime.",
+			slug: "task-diary-discipline-v1"
+		},
+		"verification-and-artifacts-v1": {
+			binding: "prompt_prefix",
+			content: "# Verification and artifacts\n\n- Run relevant verification before submitting. When task facts include `successCriteria`, assess them honestly in the generated verification contract; a fail or skip with evidence is better than a fabricated pass.\n- The registered submit-output tool owns the exact agent submission schema and validation recovery. Use that schema; do not invent a JSON shape in prose.\n- Upload large files, binary files, logs, reports, screenshots, traces, bundles, or datasets before submitting. Include artifact metadata only where the typed submit contract permits it.\n- If the task depends on prior artifacts, list and download the exact referenced artifact before judging or continuing that work.",
+			slug: "verification-and-artifacts-v1"
+		}
+	},
+	recipes: {
+		"run-eval-direct@v1": {
+			description: "Minimal direct context for a short, isolated evaluation run.",
+			fragments: ["run-eval-direct-v1"]
+		},
+		"standard-engineering@v1": {
+			description: "Full opt-in operating guidance for engineering tasks that need diary research, accountable delivery, and verification discipline.",
+			fragments: [
+				"proactive-memory-v1",
+				"task-diary-discipline-v1",
+				"accountable-delivery-v1",
+				"judgment-diary-v1",
+				"verification-and-artifacts-v1"
+			]
+		}
+	}
+};
+function deepFreeze(value) {
+	if (value && typeof value === "object") {
+		for (const key of Object.keys(value)) deepFreeze(value[key]);
+		Object.freeze(value);
+	}
+	return value;
+}
+deepFreeze(RUNTIME_PROFILE_CONTEXT_CATALOGUE);
+Object.freeze(Object.keys(RUNTIME_PROFILE_CONTEXT_CATALOGUE.recipes));
+//#endregion
 //#region ../../libs/tasks/src/runtime-profiles.ts
 var RuntimeProfileName = String$1({
 	minLength: 1,
@@ -4413,6 +4475,16 @@ var RuntimeProfileWorkspaceMode = Union([
 	Literal("shared_mount"),
 	Literal("dedicated_worktree")
 ]);
+/**
+* Tool-policy enforcement mode for the profile's runtime `tool_call` gate:
+* `off` (inert), `watch` (audit only), `enforce` (block disallowed tools,
+* fail-closed). Read by the daemon via `GET /runtime-profiles/:id/allowed-tools`.
+*/
+var RuntimeProfileToolEnforcement = Union([
+	Literal("off"),
+	Literal("watch"),
+	Literal("enforce")
+]);
 var RuntimeProfileAllowedWorkspaceModes = _Array_(RuntimeProfileWorkspaceMode, {
 	minItems: 1,
 	maxItems: 3,
@@ -4601,6 +4673,7 @@ _Object_({
 	maxBatchSize: RuntimeProfileMaxBatchSize,
 	maxTurns: RuntimeProfileMaxTurns,
 	maxBashTimeouts: RuntimeProfileMaxBashTimeouts,
+	toolEnforcement: RuntimeProfileToolEnforcement,
 	requiredEnv: _Array_(RuntimeProfileEnvName, { maxItems: 100 }),
 	requiredTools: _Array_(RuntimeProfileToolName, { maxItems: 100 }),
 	context: _Array_(RuntimeProfileContext, { maxItems: 5 }),
@@ -9191,8 +9264,6 @@ var TaskMessageKind = Union([
 var Uuid = String$1({ format: "uuid" });
 var Cid = String$1({ minLength: 1 });
 var IsoTimestamp = String$1({ format: "date-time" });
-var MAX_CLAIM_CONDITION_BRANCHES = 8;
-var MAX_CLAIM_CONDITION_STATUSES = 8;
 /**
 * Daemon-asserted runtime state stamped onto a `TaskAttemptSummary` at
 * attempt-completion time. The server persists this block verbatim and
@@ -9218,14 +9289,14 @@ Unsafe(Cyclic({ ClaimCondition: Unsafe(Union([
 		op: Literal("all"),
 		conditions: _Array_(Ref$1("ClaimCondition"), {
 			minItems: 1,
-			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+			maxItems: 8
 		})
 	}, { additionalProperties: false }),
 	_Object_({
 		op: Literal("any"),
 		conditions: _Array_(Ref$1("ClaimCondition"), {
 			minItems: 1,
-			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+			maxItems: 8
 		})
 	}, { additionalProperties: false }),
 	_Object_({
@@ -9233,7 +9304,7 @@ Unsafe(Cyclic({ ClaimCondition: Unsafe(Union([
 		taskId: Uuid,
 		statuses: _Array_(Ref$1("TaskStatus"), {
 			minItems: 1,
-			maxItems: MAX_CLAIM_CONDITION_STATUSES
+			maxItems: 8
 		})
 	}, { additionalProperties: false }),
 	_Object_({
@@ -10750,6 +10821,7 @@ async function resolveRuntimeProfile(options) {
 		allowedWorkspaceModes: profile.allowedWorkspaceModes,
 		requiredEnv: profile.requiredEnv,
 		requiredTools: profile.requiredTools,
+		toolEnforcement: profile.toolEnforcement,
 		context: profile.context ?? [],
 		sandboxConfig: profile.sandbox,
 		mountPath: resolve(options.cwd),
@@ -11460,8 +11532,11 @@ async function runPolling(opts) {
 					sandboxConfig: sandbox.config,
 					forwardEnv: profile.requiredEnv,
 					runtimeProfileContext: profile.context,
+					runtimeProfileId: profile.id,
+					toolEnforcement: profile.toolEnforcement,
 					makeExecutionPlan: (task) => executionPlans.getOrCreate(task),
 					makeOnTurnEvent: makeTurnEventHandlerFactory(taskLogger),
+					toolPolicyLogger: taskLogger,
 					maxTurns: common.maxTurns,
 					maxBashTimeouts: common.maxBashTimeouts
 				});
@@ -11720,8 +11795,11 @@ async function runOnce(argv) {
 			sandboxConfig: sandbox.config,
 			forwardEnv: profile.requiredEnv,
 			runtimeProfileContext: profile.context,
+			runtimeProfileId: profile.id,
+			toolEnforcement: profile.toolEnforcement,
 			makeExecutionPlan: (claimedTask) => executionPlans.getOrCreate(claimedTask),
 			onTurnEvent: makeTurnEventHandler(rootLogger, { taskId }),
+			toolPolicyLogger: rootLogger,
 			maxTurns: opts.maxTurns,
 			maxBashTimeouts: opts.maxBashTimeouts
 		});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/agent-daemon",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "license": "AGPL-3.0-only",
   "type": "module",
   "description": "MoltNet agent daemon — claims and executes tasks (fulfill_brief, assess_brief) from the MoltNet task-service via Pi-headless. CLI: moltnet-agent.",
@@ -51,9 +51,9 @@
     "@opentelemetry/semantic-conventions": "^1.39.0",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
-    "@themoltnet/pi-extension": "0.35.4",
-    "@themoltnet/agent-runtime": "0.36.4",
-    "@themoltnet/sdk": "0.125.0"
+    "@themoltnet/agent-runtime": "0.36.6",
+    "@themoltnet/pi-extension": "0.36.0",
+    "@themoltnet/sdk": "0.127.0"
   },
   "devDependencies": {
     "tsx": "^4.7.0",
@@ -61,9 +61,9 @@
     "vite": "^8.0.0",
     "vitest": "^3.0.0",
     "@moltnet/bootstrap": "0.1.0",
-    "@moltnet/tasks": "0.1.0",
+    "@moltnet/crypto-service": "0.1.0",
     "@moltnet/observability": "0.1.0",
-    "@moltnet/crypto-service": "0.1.0"
+    "@moltnet/tasks": "0.1.0"
   },
   "nx": {
     "projectType": "application",