@themoltnet/agent-daemon 0.34.1 → 0.35.0

package/dist/cli.js

@@ -5,10 +5,10 @@ import * as Format from "typebox/format";
 import { Type } from "typebox";
 import crypto from "crypto";
 import { Value } from "typebox/value";
-import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { parseArgs, promisify } from "node:util";
 import { AgentRuntime, ApiTaskReporter, ApiTaskSource, PollingApiTaskSource } from "@themoltnet/agent-runtime";
-import { createPiRetryTriage, findMainWorktree, normalizeRetryTriageResult, redactRetryTriageSecrets } from "@themoltnet/pi-runtime";
+import { createPiRetryTriage, findMainWorktree, isResolvedPathInsideRoot, normalizeRetryTriageResult, redactRetryTriageSecrets } from "@themoltnet/pi-runtime";
 import { execFile, execFileSync } from "node:child_process";
 import { createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, realpathSync, rmSync } from "node:fs";
 import { AuthenticationError, MoltNetError, connect } from "@themoltnet/sdk";
@@ -251,6 +251,11 @@ Type.Object({
 var RUNTIME_PROFILE_CONTEXT_CATALOGUE = {
 	version: 1,
 	fragments: {
+		"artifact-planner-v1": {
+			binding: "prompt_prefix",
+			content: "# Bounded artifact planner\n\n- The typed task facts, embedded bounded manifest, exact bound artifact references, registered tools, and runtime capability section are the complete contract. Do not search diaries, inspect a mounted repository, enumerate unrelated tasks or artifacts, use shell commands, modify files, commit, branch, push, or contact GitHub.\n- Read only the exact artifact CIDs named by the task, and only when the embedded manifest does not provide enough evidence. Never paginate or discover artifacts speculatively.\n- Perform semantic classification and planning from supplied content and producer/consumer evidence. Do not substitute filename, directory, language, ecosystem, or repository-specific exclusion rules for evidence.\n- Return exactly the requested versioned structured plan through the registered submit-output tool. Do not emit a second prose or JSON representation.",
+			slug: "artifact-planner-v1"
+		},
 		"accountable-delivery-v1": {
 			binding: "prompt_prefix",
 			content: "# Accountable delivery\n\n- Pair every commit made during this task with a signed diary entry created by the `moltnet_create_entry` custom tool. Put the returned id in a `MoltNet-Diary: <id>` commit trailer.\n- Keep commit signing enabled; do not bypass the agent git configuration.\n- Push a branch and open or update a pull request only when the task asks for it. For GitHub mutations, use the credential-bound `GH_TOKEN` command form required by the runtime kernel.\n- Keep changes, commits, and any requested pull request coherent enough to review independently.",
@@ -283,6 +288,10 @@ var RUNTIME_PROFILE_CONTEXT_CATALOGUE = {
 		}
 	},
 	recipes: {
+		"artifact-planner@v1": {
+			description: "Minimal artifact-only context for bounded semantic classification and planning.",
+			fragments: ["artifact-planner-v1"]
+		},
 		"run-eval-direct@v1": {
 			description: "Minimal direct context for a short, isolated evaluation run.",
 			fragments: ["run-eval-direct-v1"]
@@ -889,7 +898,11 @@ var ProblemDetailsSchema = Type.Object({
 	}),
 	code: ProblemCodeSchema,
 	detail: Type.Optional(Type.String()),
-	instance: Type.Optional(Type.String())
+	instance: Type.Optional(Type.String()),
+	retryAfter: Type.Optional(Type.Integer({
+		minimum: 0,
+		description: "Non-negative delay in seconds before retrying, matching the Retry-After response header when present."
+	}))
 }, {
 	$id: "ProblemDetails",
 	additionalProperties: true
@@ -1717,7 +1730,7 @@ var VerificationResult = Type.Object({
 var VerificationRecord = Type.Object({
 	inputCid: Type.String({ minLength: 1 }),
 	results: Type.Array(VerificationResult),
-	passed: Type.Boolean()
+	passed: Type.Boolean({ description: "True iff every verification result has status \"pass\" or \"skip\"; false when any result has status \"fail\"." })
 }, {
 	$id: "VerificationRecord",
 	additionalProperties: false
@@ -3692,6 +3705,10 @@ Type.Object({
 	taskId: Uuid,
 	attemptN: Type.Number({ minimum: 1 }),
 	claimedByAgentId: Uuid,
+	leaseId: Type.Union([Uuid, Type.Null()]),
+	runtimeProfileId: Type.Union([Uuid, Type.Null()]),
+	runtimeProfileRevision: Type.Union([Type.Integer({ minimum: 1 }), Type.Null()]),
+	policySnapshotHash: Type.Union([Type.String({ pattern: "^sha256:[0-9a-f]{64}$" }), Type.Null()]),
 	runtimeId: Type.Union([Uuid, Type.Null()]),
 	claimedAt: IsoTimestamp,
 	startedAt: Type.Union([IsoTimestamp, Type.Null()]),
@@ -4227,7 +4244,7 @@ function buildDaemonTaskExecutionPlan(task, stateDirs, identity, warmSessionTtlS
 	const slotKey = warmSessionTtlSec > 0 && descriptor.sessionKey ? buildRuntimeSlotKey(descriptor.sessionKey, identity.runtimeInstanceId) : null;
 	const workspaceScope = slotKey !== null ? descriptor.policy.workspaceScope : "attempt";
 	const slotId = slotKey ? buildDaemonSlotId(identity, slotKey) : null;
-	const sessionDir = slotId ? `${stateDirs.piSessionsDir}/${encodeURIComponent(slotId)}` : null;
+	const sessionDir = slotId ? `${stateDirs.piSessionsDir}/${boundedKeyDirComponent(slotId)}` : null;
 	const worktreeBranch = resolveTaskWorktreeBranch(task, workspaceMode);
 	const workspaceId = workspaceMode !== "shared_mount" ? resolveTaskWorkspaceId(task, {
 		sessionKey: slotId,
@@ -4315,8 +4332,27 @@ function isRuntimeProfileWorkspaceMode(value) {
 function toDaemonWorkspaceMode(mode) {
 	return mode === "none" ? "scratch_mount" : mode;
 }
+/**
+* URL-encode a slot/session key for use as a single filesystem directory
+* component, bounded to stay under the 255-byte per-component filename limit.
+* A long key (e.g. `run_eval`'s custom key, which embeds the variant label +
+* agent name + worker id) otherwise crashes `mkdir` with `ENAMETOOLONG`.
+*
+* Additive by design: keys short enough today keep their exact encoded form (so
+* existing warm dirs are byte-identical), and only over-long keys get a readable
+* prefix + a collision-resistant sha256 suffix. The component is never decoded
+* back to the key anywhere, so hashing the tail is safe. Used for BOTH the
+* pi-sessions dir and the session workspace dir so the two names derive
+* consistently from the same slot id.
+*/
+function boundedKeyDirComponent(key) {
+	const encoded = encodeURIComponent(key);
+	if (encoded.length <= 200) return encoded;
+	const hash = createHash("sha256").update(key).digest("hex").slice(0, 16);
+	return `${encoded.slice(0, 180)}-${hash}`;
+}
 function resolveTaskWorkspaceId(task, executionPlan) {
-	if (executionPlan.workspaceScope === "session" && executionPlan.sessionKey !== null) return `session-${encodeURIComponent(executionPlan.sessionKey)}`;
+	if (executionPlan.workspaceScope === "session" && executionPlan.sessionKey !== null) return `session-${boundedKeyDirComponent(executionPlan.sessionKey)}`;
 	return executionPlan.attemptN ? `daemon-task-${task.id}-attempt-${executionPlan.attemptN}` : `task-${task.id}`;
 }
 //#endregion
@@ -5395,15 +5431,11 @@ async function listRegisteredWorktrees(mainWorktree) {
 }
 function isRealPathInsideRoot(path, root) {
 	try {
-		return isResolvedPathInsideRoot$1(realpathSync(path), realpathSync(root));
+		return isResolvedPathInsideRoot(realpathSync(path), realpathSync(root));
 	} catch {
 		return false;
 	}
 }
-function isResolvedPathInsideRoot$1(path, root) {
-	const rel = relative(root, path);
-	return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
 function canonicalPath(path) {
 	try {
 		return realpathSync(path);
@@ -6774,10 +6806,6 @@ async function isPathInsideRoot(path, root) {
 	}
 	return isResolvedPathInsideRoot(realResolvedPath, realResolvedRoot);
 }
-function isResolvedPathInsideRoot(path, root) {
-	const rel = relative(root, path);
-	return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
-}
 async function computeCompressedSessionFingerprint(path) {
 	const hash = createHash("sha256");
 	let bytes = 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/agent-daemon",
-  "version": "0.34.1",
+  "version": "0.35.0",
   "license": "AGPL-3.0-only",
   "type": "module",
   "description": "Universal MoltNet agent daemon host with a built-in Pi/Gondolin runtime and support for trusted operator-owned runtime modules. CLI: moltnet-agent.",
@@ -44,7 +44,7 @@
   },
   "dependencies": {
     "@earendil-works/gondolin": "^0.9.1",
-    "@earendil-works/pi-ai": "0.74.0",
+    "@earendil-works/pi-ai": "0.79.4",
     "@earendil-works/pi-coding-agent": "0.79.4",
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/exporter-trace-otlp-proto": "^0.212.0",
@@ -62,8 +62,8 @@
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
     "typebox": "^1.2.8",
-    "@themoltnet/agent-runtime": "0.38.0",
-    "@themoltnet/pi-runtime": "0.3.0",
+    "@themoltnet/agent-runtime": "0.39.1",
+    "@themoltnet/pi-runtime": "0.5.0",
     "@themoltnet/sdk": "0.128.0"
   },
   "devDependencies": {
@@ -73,9 +73,9 @@
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.0.0",
     "@moltnet/bootstrap": "0.1.0",
-    "@moltnet/tasks": "0.1.0",
     "@moltnet/crypto-service": "0.1.0",
-    "@moltnet/observability": "0.1.0"
+    "@moltnet/observability": "0.1.0",
+    "@moltnet/tasks": "0.1.0"
   },
   "nx": {
     "projectType": "application",