@themoltnet/agent-daemon 0.44.1 → 0.45.0

package/README.md

@@ -91,7 +91,7 @@ All config flows from environment variables. The daemon reads them in
 
 For OAuth2/local mode, the agent's `moltnet.json` and gitconfig live next to
 each other in `.moltnet/<agent>/`. Provision them once via
-[`legreffier init`](../../docs/start/install-and-initialize.md).
+[`moltnet agents init`](../../docs/start/install-and-initialize.md#initialize-an-autonomous-agent).
 
 **Auth mode.** When `MOLTNET_AGENT_KEY` is set the daemon authenticates with
 that key as an opaque bearer token (no OAuth2 exchange); otherwise it uses the

package/dist/cli.js

@@ -12,7 +12,7 @@ import { AgentRuntime, ApiTaskReporter, ApiTaskSource, PollingApiTaskSource, cre
 import { GuestEnvironmentBoundaryError, assertGuestEnvironmentBoundary, createPiRetryTriage, findMainWorktree, isResolvedPathInsideRoot, normalizeRetryTriageResult, redactRetryTriageSecrets } from "@themoltnet/pi-runtime";
 import { execFile, execFileSync } from "node:child_process";
 import { createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, realpathSync, rmSync } from "node:fs";
-import { AuthenticationError, MoltNetError, connect, createExecutorAttestor, readConfig } from "@themoltnet/sdk";
+import { AuthenticationError, MoltNetError, connect, createExecutorAttestor, readConfig, resolveEnvSecretReference, resolveIdentitySeed } from "@themoltnet/sdk";
 import { createNodeSecretProviderRegistry } from "@themoltnet/sdk/node";
 import { createHash, randomUUID } from "node:crypto";
 import * as ed from "@noble/ed25519";
@@ -2405,8 +2405,8 @@ async function validateJudgePackInputAsync(input, ctx) {
 //#endregion
 //#region ../../libs/tasks/src/task-types/judge-eval-attempt.ts
 /**
-* `judge_eval_attempt` — score one completed `run_eval` attempt against a
-* hidden judge rubric.
+* `judge_eval_attempt` — score one completed artifact-producing attempt
+* against a hidden judge rubric.
 *
 * output_kind: judgment
 * criteria: required (`successCriteria.rubric`)
@@ -2510,9 +2510,9 @@ async function validateJudgeEvalAttemptInputAsync(input, ctx) {
 		field: "targetTaskId",
 		message: `targetTaskId=${inp.targetTaskId} does not resolve to a task you can read`
 	}];
-	if (target.taskType !== "run_eval") errors.push({
+	if (target.outputKind !== "artifact") errors.push({
 		field: "targetTaskId",
-		message: `targetTaskId=${inp.targetTaskId} is a ${target.taskType}, not a run_eval`
+		message: `targetTaskId=${inp.targetTaskId} has outputKind=${target.outputKind}; only artifact-producing tasks can be judged`
 	});
 	if (!ctx.deferReadinessChecks && (target.status !== "completed" || target.acceptedAttemptN === null)) errors.push({
 		field: "targetTaskId",
@@ -2524,7 +2524,7 @@ async function validateJudgeEvalAttemptInputAsync(input, ctx) {
 	});
 	if (!target.correlationId) errors.push({
 		field: "targetTaskId",
-		message: "target run_eval has no correlation_id; cannot enforce duplicate-judge protection"
+		message: "target producer has no correlation_id; cannot enforce duplicate-judge protection"
 	});
 	if (errors.length > 0 || !target.correlationId) return errors;
 	const rubric = inp.successCriteria.rubric;
@@ -3433,7 +3433,8 @@ Commands:
 Run \`agent-daemon <command> --help\` for command-specific flags.
 
 Prerequisites:
-  - agent-key mode: MOLTNET_AGENT_KEY and MOLTNET_PRIVATE_KEY; no agent files
+  - agent-key mode: MOLTNET_AGENT_KEY (or MOLTNET_AGENT_KEY_REF) and
+    MOLTNET_PRIVATE_KEY (or MOLTNET_PRIVATE_KEY_REF); no agent files
   - OAuth2 and sync-sessions: <agent-root>/.moltnet/<agent>/moltnet.json
   - --profile — remote runtime profile supplies provider/model/sandbox
     policy and CWD is used as the VM mountPath.
@@ -3563,7 +3564,8 @@ function isHelpFlag(args) {
 /**
 * Report which auth mode `connect()` will use, without ever reading the secret
 * value into anything logged. Agent-key mode is selected when
-* `MOLTNET_AGENT_KEY` holds a non-blank value — mirroring the SDK precedence
+* `MOLTNET_AGENT_KEY` or `MOLTNET_AGENT_KEY_REF` holds a non-blank value —
+* mirroring the SDK precedence
 * where an environment key opts into key mode ahead of the config-file OAuth2
 * credentials. The daemon never passes explicit in-code credentials to
 * `connect()`, so this env-only check matches what `connect()` actually does.
@@ -3571,7 +3573,7 @@ function isHelpFlag(args) {
 * Pure: `env` is passed in (the config module owns the `process.env` read).
 */
 function detectAuthMode(env) {
-	return env.MOLTNET_AGENT_KEY?.trim() ? "agent-key" : "oauth2";
+	return env.MOLTNET_AGENT_KEY?.trim() || env.MOLTNET_AGENT_KEY_REF?.trim() ? "agent-key" : "oauth2";
 }
 /**
 * Pure check: may the identity described by `whoami` operate the daemon as
@@ -3637,7 +3639,9 @@ async function resolveAgentContext(agentName, options = {}) {
 		return {
 			agentDir: join(rootDir, ".moltnet", agentName),
 			agentRootDir: rootDir,
-			agent: await connect()
+			agent: await connect({ secretProviders: createNodeSecretProviderRegistry() }),
+			credentialSource: "environment",
+			authMechanism: "agent-key"
 		};
 	}
 	const located = locateAgentConfig(roots, agentName);
@@ -3646,10 +3650,13 @@ async function resolveAgentContext(agentName, options = {}) {
 			configDir: located.agentDir,
 			secretProviders: createNodeSecretProviderRegistry()
 		});
+		const config = await readConfig(located.agentDir);
 		return {
 			agentDir: located.agentDir,
 			agentRootDir: located.rootDir,
-			agent
+			agent,
+			credentialSource: "config",
+			authMechanism: config?.agent_key_ref ? "agent-key" : "oauth2"
 		};
 	}
 	const tried = roots.map((root) => join(root, ".moltnet", agentName));
@@ -3691,6 +3698,8 @@ function resolveCredentialRoots(agentRootDir) {
 * sprinkling string lookups across the codebase.
 */
 function loadConfig() {
+	assertSingleCredentialForm("MOLTNET_AGENT_KEY", "MOLTNET_AGENT_KEY_REF");
+	assertSingleCredentialForm("MOLTNET_PRIVATE_KEY", "MOLTNET_PRIVATE_KEY_REF");
 	return {
 		otelEndpoint: process.env["MOLTNET_OTEL_ENDPOINT"] ?? "",
 		logLevel: process.env["LOG_LEVEL"] ?? "",
@@ -3699,10 +3708,14 @@ function loadConfig() {
 		piCodingAgentDir: process.env["PI_CODING_AGENT_DIR"] ?? "",
 		authMode: detectAuthMode(process.env),
 		signingPrivateKey: process.env["MOLTNET_PRIVATE_KEY"] ?? "",
+		signingPrivateKeyRef: process.env["MOLTNET_PRIVATE_KEY_REF"] ?? "",
 		gitAuthor: process.env["MOLTNET_GIT_AUTHOR"] ?? "",
 		traceIdlePolling: readBoolean("MOLTNET_TRACE_IDLE_POLLING", process.env["MOLTNET_TRACE_IDLE_POLLING"])
 	};
 }
+function assertSingleCredentialForm(valueName, refName) {
+	if (process.env[valueName]?.trim() && process.env[refName]?.trim()) throw new Error(`Set only one of ${valueName} or ${refName}`);
+}
 function readBoolean(name, value) {
 	if (value === void 0 || value === "") return false;
 	if (value === "true") return true;
@@ -3910,6 +3923,7 @@ function buildDaemonTaskExecutionPlan(task, stateDirs, identity, warmSessionTtlS
 	return {
 		descriptor,
 		workspaceMode,
+		workspaceKind: workspaceMode === "scratch_mount" ? "scratch" : void 0,
 		sessionKey: slotId,
 		slotKey,
 		slotId,
@@ -4203,15 +4217,16 @@ async function maybeAttachWarmSlotContext(claimedTask, basePlan, stateDirs, slot
 	if (resolution.kind === "missing") throw new ProducerContextResolutionError(`No live producer runtime slot found for task ${targetTaskId} attempt ${targetAttemptN}`);
 	if (resolution.kind === "no-session-path") throw new ProducerContextResolutionError(`Producer task ${targetTaskId} attempt ${targetAttemptN} has no persisted Pi session path`);
 	if (resolution.kind === "remote-session") throw new ProducerContextResolutionError(`Producer task ${targetTaskId} attempt ${targetAttemptN} has a durable runtime session but no workspace metadata to copy`);
+	const producerWorkspaceCopySource = resolveProducerWorkspaceCopySource(resolution.producerSlot, stateDirs);
 	return {
 		...basePlan,
 		workspaceMode: "scratch_mount",
 		worktreeBranch: null,
 		workspaceKind: "scratch",
-		workspaceSeed: {
-			copyFromPath: resolveProducerWorkspaceCopySource(resolution.producerSlot, stateDirs),
+		workspaceSeed: producerWorkspaceCopySource ? {
+			copyFromPath: producerWorkspaceCopySource,
 			source: "producer"
-		},
+		} : null,
 		sessionPersistence: {
 			sessionDir: `${stateDirs.piSessionsDir}/judge-${claimedTask.task.id}-attempt-${claimedTask.attemptN}`,
 			forkFromSessionPath: resolution.sessionPath
@@ -4254,12 +4269,18 @@ function resolveProducerWorkspaceCopySource(producer, stateDirs) {
 		if (existsSync(workspacePath)) return workspacePath;
 		const recoveredPath = recoverScratchWorkspacePath(producer, stateDirs);
 		if (recoveredPath) return recoveredPath;
+		if (isDisposableScratchWorkspace(producer, stateDirs)) return null;
 		throw new ProducerContextResolutionError(`Producer workspace path is missing on disk: ${workspacePath}`);
 	}
 	const sharedMountRoot = dirname(dirname(stateDirs.rootDir));
 	if (!existsSync(sharedMountRoot)) throw new ProducerContextResolutionError(`Shared producer mount root is missing on disk: ${sharedMountRoot}`);
 	return sharedMountRoot;
 }
+function isDisposableScratchWorkspace(producer, stateDirs) {
+	if (producer.workspace?.kind === "scratch") return true;
+	if (!producer.workspace?.workspaceId) return false;
+	return producer.workspace.worktreePath === join(stateDirs.rootDir, "task-workspaces", producer.workspace.workspaceId);
+}
 function recoverScratchWorkspacePath(producer, stateDirs) {
 	if (producer.workspace?.worktreeBranch) return null;
 	if (!producer.workspace?.workspaceId) return null;
@@ -4438,12 +4459,25 @@ var DAEMON_REQUIRED_SCOPES = AGENT_CREDENTIAL_SCOPES;
 async function resolveExecutorSigningPrivateKey(input) {
 	if (input.authMode === "agent-key") {
 		const privateKey = input.configuredPrivateKey.trim();
-		if (!privateKey) throw new Error("Agent-key daemon startup requires MOLTNET_PRIVATE_KEY containing the base64-encoded Ed25519 private key seed.");
-		return privateKey;
+		if (privateKey) return privateKey;
+		const reference = input.configuredPrivateKeyRef?.trim();
+		if (!reference) throw new Error("Agent-key daemon startup requires MOLTNET_PRIVATE_KEY (or MOLTNET_PRIVATE_KEY_REF) containing the base64-encoded Ed25519 private key seed.");
+		let resolved;
+		try {
+			resolved = await resolveEnvSecretReference(reference, createNodeSecretProviderRegistry());
+		} catch (cause) {
+			throw new Error(`Agent-key daemon startup could not resolve MOLTNET_PRIVATE_KEY_REF: ${cause.message}`, { cause });
+		}
+		if (Buffer.from(resolved, "base64").length !== 32) throw new Error("MOLTNET_PRIVATE_KEY_REF must resolve to a base64-encoded 32-byte Ed25519 seed.");
+		return resolved;
+	}
+	const config = await readConfig(input.agentDir);
+	if (!config) throw new Error(`OAuth2 daemon startup requires ${input.agentDir}/moltnet.json.`);
+	try {
+		return await resolveIdentitySeed(config, createNodeSecretProviderRegistry());
+	} catch (cause) {
+		throw new Error(`OAuth2 daemon startup could not resolve the signing seed from ${input.agentDir}/moltnet.json (keys.private_key or keys.private_key_ref): ${cause.message}`, { cause });
 	}
-	const privateKey = (await readConfig(input.agentDir))?.keys?.private_key?.trim();
-	if (!privateKey) throw new Error(`OAuth2 daemon startup requires keys.private_key in ${input.agentDir}/moltnet.json.`);
-	return privateKey;
 }
 function validateDaemonScopes(whoami) {
 	const available = new Set(whoami.scopes ?? []);
@@ -5679,7 +5713,8 @@ async function runPolling(opts) {
 			const privateKey = await resolveExecutorSigningPrivateKey({
 				authMode: cfg.authMode,
 				agentDir: resolvedContext.agentDir,
-				configuredPrivateKey: cfg.signingPrivateKey
+				configuredPrivateKey: cfg.signingPrivateKey,
+				configuredPrivateKeyRef: cfg.signingPrivateKeyRef
 			});
 			gate = "validate_scopes";
 			validateDaemonScopes(whoami);
@@ -5814,7 +5849,7 @@ async function runPolling(opts) {
 		resourceAttributes: {
 			"moltnet.team.id": teamId,
 			"moltnet.agent.name": baseCommon.agent,
-			"moltnet.auth.mode": cfg.authMode,
+			"moltnet.auth.mode": ctx.authMechanism,
 			"moltnet.runtime_profile.count": String(profiles.length),
 			"moltnet.runtime_profile.ids": profiles.map((p) => p.id).join(",")
 		}
@@ -6315,7 +6350,8 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 			const privateKey = await resolveExecutorSigningPrivateKey({
 				authMode: cfg.authMode,
 				agentDir: resolvedContext.agentDir,
-				configuredPrivateKey: cfg.signingPrivateKey
+				configuredPrivateKey: cfg.signingPrivateKey,
+				configuredPrivateKeyRef: cfg.signingPrivateKeyRef
 			});
 			gate = "validate_scopes";
 			validateDaemonScopes(whoami);
@@ -6415,7 +6451,7 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 		resourceAttributes: {
 			"moltnet.task.id": taskId,
 			"moltnet.agent.name": opts.agent,
-			"moltnet.auth.mode": cfg.authMode,
+			"moltnet.auth.mode": ctx.authMechanism,
 			"moltnet.llm.provider": profile.provider,
 			"moltnet.llm.model": profile.model,
 			...profile.thinkingLevel ? { "moltnet.llm.thinking_level": profile.thinkingLevel } : {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/agent-daemon",
-  "version": "0.44.1",
+  "version": "0.45.0",
   "license": "AGPL-3.0-only",
   "type": "module",
   "description": "Universal MoltNet agent daemon host with a built-in Pi/Gondolin runtime and support for trusted operator-owned runtime modules. CLI: moltnet-agent.",
@@ -78,10 +78,10 @@
     "pino-opentelemetry-transport": "^3.0.0",
     "pino-pretty": "^13.1.3",
     "typebox": "^1.2.8",
-    "@themoltnet/agent-runtime": "0.44.0",
-    "@themoltnet/os-keyring": "0.2.0",
-    "@themoltnet/pi-runtime": "0.12.1",
-    "@themoltnet/sdk": "0.137.0"
+    "@themoltnet/os-keyring": "0.3.0",
+    "@themoltnet/agent-runtime": "0.45.0",
+    "@themoltnet/pi-runtime": "0.12.2",
+    "@themoltnet/sdk": "0.138.0"
   },
   "devDependencies": {
     "tsx": "^4.7.0",