@themoltnet/agent-daemon 0.57.0 → 0.57.1

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { a as cryptoService, defaultPiDaemonAdapter, i as compileExecutionPlan, n as createExecutionPlanSnapshot, r as parseCredentialRequirements, t as runtimeExecutionOffer } from "./pi.js";
 import { assertRuntimeAdapterSupportsProfile } from "./runtime.js";
+import { a as cryptoService, defaultPiDaemonAdapter, i as compileExecutionPlan, n as createExecutionPlanSnapshot, r as parseCredentialRequirements, t as runtimeExecutionOffer } from "./pi.js";
 import { createRequire } from "node:module";
 import { pino, transport } from "pino";
 import { Type } from "typebox";
@@ -10,7 +10,7 @@ import "multiformats/hashes/sha2";
 import "typebox/value";
 import { basename, dirname, isAbsolute, join, resolve, sep } from "node:path";
 import { parseArgs, promisify } from "node:util";
-import { AgentRuntime, ApiTaskReporter, ApiTaskSource, PollingApiTaskSource, createLocalSeedSigner, resolveAgentIdentity, resolveProfileWarmSessionTtlSec, resolveRuntimeProfile, resolveRuntimeProfiles, validateRuntimeProfilePrerequisites } from "@themoltnet/agent-runtime";
+import { AgentRuntime, ApiTaskReporter, ApiTaskSource, PollingApiTaskSource, createLocalSeedSigner, resolveAgentIdentity, resolveRuntimeProfile, resolveRuntimeProfiles, validateRuntimeProfilePrerequisites } from "@themoltnet/agent-runtime";
 import { GuestEnvironmentBoundaryError, assertGuestEnvironmentBoundary, createPiRetryTriage, findMainWorktree, isResolvedPathInsideRoot, normalizeRetryTriageResult, redactRetryTriageSecrets, resolveRuntimeProfileModel } from "@themoltnet/pi-runtime";
 import { FILE_SECRET_PROVIDER, FileSecretProvider, RegisterIdentityError, boundedIdentitySignal, connect, createNodeSecretProviderRegistry, register } from "@themoltnet/sdk/node";
 import { constants, copyFileSync, createReadStream, createWriteStream, existsSync, lstatSync, mkdirSync, mkdtempSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
@@ -1937,18 +1937,6 @@ var RuntimeProfileRef = Type.Object({ profileId: Type.String({ format: "uuid" })
 	$id: "RuntimeProfileRef",
 	additionalProperties: false
 });
-var RuntimeProfileLeaseTtlSec = Type.Integer({
-	minimum: 1,
-	maximum: 86400
-});
-var RuntimeProfileHeartbeatIntervalMs = Type.Integer({
-	minimum: 0,
-	maximum: 36e5
-});
-var RuntimeProfileMaxBatchSize = Type.Integer({
-	minimum: 1,
-	maximum: 1e3
-});
 var RuntimeProfileMaxTurns = Type.Integer({
 	minimum: 0,
 	maximum: 1e4
@@ -1977,21 +1965,8 @@ Type.Object({
 	maxOutputTokens: RuntimeProfileNullableMaxOutputTokens,
 	runtimeKind: RuntimeProfileRuntimeKind,
 	sandbox: RuntimeProfileSandbox,
-	sessionStorageMode: Type.Literal("local"),
-	workspaceStorageMode: Type.Literal("local"),
 	defaultWorkspaceMode: Type.Union([RuntimeProfileWorkspaceMode, Type.Null()]),
 	allowedWorkspaceModes: RuntimeProfileAllowedWorkspaceModes,
-	sessionTtlSec: Type.Integer({
-		minimum: 1,
-		maximum: 86400
-	}),
-	workspaceTtlSec: Type.Integer({
-		minimum: 1,
-		maximum: 86400
-	}),
-	leaseTtlSec: RuntimeProfileLeaseTtlSec,
-	heartbeatIntervalMs: RuntimeProfileHeartbeatIntervalMs,
-	maxBatchSize: RuntimeProfileMaxBatchSize,
 	maxTurns: RuntimeProfileMaxTurns,
 	maxBashTimeouts: RuntimeProfileMaxBashTimeouts,
 	toolEnforcement: RuntimeProfileToolEnforcement,
@@ -2124,6 +2099,7 @@ var ResolvedRuntimeSlot = Type.Object({
 	workspace: Type.Union([RuntimeWorkspace, Type.Null()])
 }, { $id: "ResolvedRuntimeSlot" });
 Type.Object({ items: Type.Array(ResolvedRuntimeSlot) }, { $id: "RuntimeSlotListResponse" });
+var MAX_RUNTIME_WARM_RETENTION_SEC = 86400;
 Type.Object({
 	agentName: Type.String({
 		minLength: 1,
@@ -2150,7 +2126,11 @@ Type.Object({
 	worktreeBranch: Type.Optional(Type.String({ minLength: 1 })),
 	workspaceKind: Type.Optional(RuntimeWorkspaceKind),
 	lastTaskId: Type.String({ format: "uuid" }),
-	lastAttemptN: Type.Integer({ minimum: 1 })
+	lastAttemptN: Type.Integer({ minimum: 1 }),
+	warmRetentionSec: Type.Integer({
+		minimum: 0,
+		maximum: MAX_RUNTIME_WARM_RETENTION_SEC
+	})
 }, {
 	$id: "BeginRuntimeSlotBody",
 	additionalProperties: false
@@ -2172,7 +2152,11 @@ Type.Object({
 	slotKey: Type.String({ minLength: 1 }),
 	taskId: Type.String({ format: "uuid" }),
 	attemptN: Type.Integer({ minimum: 1 }),
-	sessionPath: Type.Optional(Type.String({ minLength: 1 }))
+	sessionPath: Type.Optional(Type.String({ minLength: 1 })),
+	warmRetentionSec: Type.Integer({
+		minimum: 0,
+		maximum: MAX_RUNTIME_WARM_RETENTION_SEC
+	})
 }, {
 	$id: "FinishRuntimeSlotBody",
 	additionalProperties: false
@@ -3461,7 +3445,7 @@ var COMMON_REQUIRED_FLAGS = `\
   --profile <uuid|name>       Remote runtime profile. Repeat for poll/drain
                               to declare priority order. Provider, model,
                               sandbox policy, prerequisites, and runtime
-                              defaults come from the selected profile.`;
+                              execution policy come from the selected profile.`;
 var COMMON_OPTIONAL_FLAGS = `\
   --sandbox <path>            Deprecated. Remote runtime profiles define
                               sandbox policy.
@@ -3473,24 +3457,10 @@ var COMMON_OPTIONAL_FLAGS = `\
                               host git config. Configless agent-key runs must
                               provide this flag or MOLTNET_GIT_AUTHOR.
                               Env: MOLTNET_GIT_AUTHOR.
-  --lease-ttl-sec <n>         Sliding liveness window. Silence longer than
-                              this ends the attempt with lease_expired.
-                              Default: 300.
   --heartbeat-interval-ms <n> Reporter heartbeat cadence. Default: 60000.
-  --max-batch-size <n>        Reporter message batch size. Default: 50.
-  --flush-interval-ms <n>     Reporter flush window. Default: 200.
-  --max-turns <n>             Cap on tool-use turns per attempt; over this,
-                              the pi session aborts and the attempt fails
-                              with code 'max_turns_exceeded'. 0 = disabled.
-                              Default: 0. Recommended ~30 for fulfill_brief.
-  --max-bash-timeouts <n>     Cap on bash-tool timeouts per attempt; over
-                              this, the pi session aborts and the attempt
-                              fails with code 'max_bash_timeouts_exceeded'.
-                              0 = disabled. Default: 3.
-  --warm-session-ttl-sec <n>  Resumability window for runtime slots
+  --warm-retention-sec <n>    Resumability window for runtime slots
                               (Pi sessions + reusable worktrees) after use.
-                              Default: 1800, or min(profile session/workspace
-                              TTL) when --profile is set.
+                              Default: 1800.
   --debug                     Verbose logging: also log successful list/claim
                               outcomes (candidate counts, claim attempts).`;
 var REGISTERED_TASK_TYPES = Object.keys(BUILT_IN_TASK_TYPES).sort();
@@ -3681,6 +3651,8 @@ Options:
                               (or MOLTNET_AGENT_SERVER_ROOT).
   --api-url <url>             Default MoltNet API for new managed agents.
                               Default: https://api.themolt.net.
+  --heartbeat-interval-ms <n> Child reporter heartbeat cadence. Default: 60000.
+  --warm-retention-sec <n>    Child session/workspace retention. Default: 1800.
 
 On macOS, the first interactive run asks to trust a per-user local CA in the
 login keychain and serves HTTPS. Run \`agent-daemon server trust --remove\` to
@@ -4189,10 +4161,10 @@ function slugifySessionComponent(input) {
 }
 //#endregion
 //#region src/lib/task-execution-plan.ts
-function buildDaemonTaskExecutionPlan(task, stateDirs, identity, warmSessionTtlSec, runtimeProfileWorkspacePolicy = {}, attemptN) {
+function buildDaemonTaskExecutionPlan(task, stateDirs, identity, warmRetentionSec, runtimeProfileWorkspacePolicy = {}, attemptN) {
 	const descriptor = deriveTaskSessionDescriptor(task);
 	const workspaceMode = resolveTaskWorkspaceMode(task, descriptor.policy, runtimeProfileWorkspacePolicy);
-	const slotKey = warmSessionTtlSec > 0 && descriptor.sessionKey ? buildRuntimeSlotKey(descriptor.sessionKey, identity.runtimeInstanceId) : null;
+	const slotKey = warmRetentionSec > 0 && descriptor.sessionKey ? buildRuntimeSlotKey(descriptor.sessionKey, identity.runtimeInstanceId) : null;
 	const workspaceScope = slotKey !== null ? descriptor.policy.workspaceScope : "attempt";
 	const slotId = slotKey ? buildDaemonSlotId(identity, slotKey) : null;
 	const sessionDir = slotId ? `${stateDirs.piSessionsDir}/${boundedKeyDirComponent(slotId)}` : null;
@@ -4331,7 +4303,7 @@ function createExecutionPlanCache(args) {
 			const key = buildClaimedTaskKey(claimedTask);
 			const existing = cache.get(key);
 			if (existing) return existing;
-			const plan = await maybeAttachWarmSlotContext(claimedTask, buildDaemonTaskExecutionPlan(claimedTask.task, args.stateDirs, args.slotIdentity, args.warmSessionTtlSec, args.workspacePolicy, claimedTask.attemptN), args.stateDirs, args.slotRegistry, runtimeSessionStore, sourceAttemptResolver);
+			const plan = await maybeAttachWarmSlotContext(claimedTask, buildDaemonTaskExecutionPlan(claimedTask.task, args.stateDirs, args.slotIdentity, args.warmRetentionSec, args.workspacePolicy, claimedTask.attemptN), args.stateDirs, args.slotRegistry, runtimeSessionStore, sourceAttemptResolver);
 			assertPlanAllowedByWorkspacePolicy(plan, args.workspacePolicy, args.slotIdentity.runtimeProfileId);
 			cache.set(key, plan);
 			return plan;
@@ -5022,7 +4994,8 @@ function ownBinding(bindings, name) {
 }
 //#endregion
 //#region ../../libs/execution-integrations/src/runtime-profile.ts
-var CURRENT_EFFECTIVE_POLICY_SNAPSHOT_VERSION = "effective-policy:v1";
+var CURRENT_EFFECTIVE_POLICY_SNAPSHOT_VERSION = "effective-policy:v2";
+var DEFAULT_EXECUTION_LEASE_TTL_SEC = 300;
 /**
 * Maps resolved product authority into portable intent. Policy composition is
 * deliberately upstream: this boundary accepts no policy IDs and performs no
@@ -5046,7 +5019,7 @@ function executionIntentFromRuntimeProfile(input) {
 		credentialRequirements: structuredClone(input.credentialRequirements),
 		requiredCapabilities: [...input.requiredCapabilities ?? []],
 		lease: {
-			ttlSec: input.profile.leaseTtlSec,
+			ttlSec: DEFAULT_EXECUTION_LEASE_TTL_SEC,
 			requiredControls: [...input.requiredLeaseControls ?? []]
 		},
 		network: {
@@ -5296,14 +5269,9 @@ async function logDaemonStartupFailure(input) {
 }
 //#endregion
 //#region src/lib/options.ts
-var DEFAULTS = {
-	leaseTtlSec: 300,
+var DEFAULT_LOCAL_OPERATIONAL_SETTINGS = {
 	heartbeatIntervalMs: 6e4,
-	maxBatchSize: 50,
-	flushIntervalMs: 200,
-	maxTurns: 0,
-	maxBashTimeouts: 3,
-	warmSessionTtlSec: 1800
+	warmRetentionSec: 1800
 };
 var MissingRequiredOptionError = class extends Error {
 	constructor(flag) {
@@ -5312,42 +5280,33 @@ var MissingRequiredOptionError = class extends Error {
 		this.name = "MissingRequiredOptionError";
 	}
 };
-function parseCommonOptions(args, options = {}) {
-	const runtimeDefaults = {
-		leaseTtlSec: options.runtimeDefaults?.leaseTtlSec ?? DEFAULTS.leaseTtlSec,
-		heartbeatIntervalMs: options.runtimeDefaults?.heartbeatIntervalMs ?? DEFAULTS.heartbeatIntervalMs,
-		maxBatchSize: options.runtimeDefaults?.maxBatchSize ?? DEFAULTS.maxBatchSize,
-		maxTurns: options.runtimeDefaults?.maxTurns ?? DEFAULTS.maxTurns,
-		maxBashTimeouts: options.runtimeDefaults?.maxBashTimeouts ?? DEFAULTS.maxBashTimeouts,
-		warmSessionTtlSec: options.runtimeDefaults?.warmSessionTtlSec ?? DEFAULTS.warmSessionTtlSec
-	};
+function parseIdentityProcessOptions(args) {
 	if (!args.agent) throw new MissingRequiredOptionError("agent");
 	if (!/^[a-zA-Z0-9_-]+$/.test(args.agent)) throw new Error(`Invalid --agent "${args.agent}": must match /^[a-zA-Z0-9_-]+$/`);
 	return {
 		agent: args.agent,
-		leaseTtlSec: parsePositiveInt(args["lease-ttl-sec"], "lease-ttl-sec", runtimeDefaults.leaseTtlSec),
-		heartbeatIntervalMs: parseNonNegativeInt(args["heartbeat-interval-ms"], "heartbeat-interval-ms", runtimeDefaults.heartbeatIntervalMs),
-		maxBatchSize: parsePositiveInt(args["max-batch-size"], "max-batch-size", runtimeDefaults.maxBatchSize),
-		flushIntervalMs: parseNonNegativeInt(args["flush-interval-ms"], "flush-interval-ms", DEFAULTS.flushIntervalMs),
-		maxTurns: parseNonNegativeInt(args["max-turns"], "max-turns", runtimeDefaults.maxTurns),
-		maxBashTimeouts: parseNonNegativeInt(args["max-bash-timeouts"], "max-bash-timeouts", runtimeDefaults.maxBashTimeouts),
-		warmSessionTtlSec: parseNonNegativeInt(args["warm-session-ttl-sec"], "warm-session-ttl-sec", runtimeDefaults.warmSessionTtlSec),
 		debug: args.debug === true
 	};
 }
-function parsePositiveInt(raw, name, defaultValue) {
-	if (raw === void 0) return defaultValue;
-	const v = Number(raw);
-	if (!Number.isInteger(v) || v < 1) throw new Error(`Invalid --${name} "${raw}": must be a positive integer`);
-	return v;
+function parseLocalOperationalSettings(args) {
+	return {
+		heartbeatIntervalMs: parseNonNegativeInt(args["heartbeat-interval-ms"], "heartbeat-interval-ms", DEFAULT_LOCAL_OPERATIONAL_SETTINGS.heartbeatIntervalMs),
+		warmRetentionSec: parseNonNegativeInt(args["warm-retention-sec"], "warm-retention-sec", DEFAULT_LOCAL_OPERATIONAL_SETTINGS.warmRetentionSec, MAX_RUNTIME_WARM_RETENTION_SEC)
+	};
+}
+function parseRuntimeCommandOptions(args) {
+	return {
+		identity: parseIdentityProcessOptions(args),
+		operations: parseLocalOperationalSettings(args)
+	};
 }
-function parseNonNegativeInt(raw, name, defaultValue) {
+function parseNonNegativeInt(raw, name, defaultValue, maximum = Number.MAX_SAFE_INTEGER) {
 	if (raw === void 0) return defaultValue;
-	const v = Number(raw);
-	if (!Number.isInteger(v) || v < 0) throw new Error(`Invalid --${name} "${raw}": must be a non-negative integer`);
-	return v;
+	const value = Number(raw);
+	if (!Number.isInteger(value) || value < 0 || value > maximum) throw new Error(`Invalid --${name} "${raw}": must be a non-negative integer no greater than ${maximum}`);
+	return value;
 }
-function commonOptionDefs() {
+function identityOptionDefs() {
 	return {
 		agent: {
 			type: "string",
@@ -5355,18 +5314,18 @@ function commonOptionDefs() {
 		},
 		"agent-root": { type: "string" },
 		"git-author": { type: "string" },
-		"lease-ttl-sec": { type: "string" },
-		"heartbeat-interval-ms": { type: "string" },
-		"max-batch-size": { type: "string" },
-		"flush-interval-ms": { type: "string" },
-		"max-turns": { type: "string" },
-		"max-bash-timeouts": { type: "string" },
-		"warm-session-ttl-sec": { type: "string" },
 		debug: { type: "boolean" }
 	};
 }
+function runtimeCommandOptionDefs() {
+	return {
+		...identityOptionDefs(),
+		"heartbeat-interval-ms": { type: "string" },
+		"warm-retention-sec": { type: "string" }
+	};
+}
 function validateTaskTypes(types) {
-	const unknown = types.filter((t) => !Object.prototype.hasOwnProperty.call(BUILT_IN_TASK_TYPES, t));
+	const unknown = types.filter((taskType) => !Object.prototype.hasOwnProperty.call(BUILT_IN_TASK_TYPES, taskType));
 	if (unknown.length > 0) throw new Error(`Unknown task type(s): ${unknown.join(", ")}. Known types: ${knownTaskTypesList()}.`);
 	return [...types];
 }
@@ -5936,6 +5895,64 @@ function mergePiModels(store, repo) {
 	return { providers };
 }
 //#endregion
+//#region src/lib/state-dir.ts
+function ensureDaemonStateDirs(mountPath) {
+	const rootDir = join(mountPath, ".moltnet", "d");
+	const piSessionsDir = join(rootDir, "pi-sessions");
+	mkdirSync(piSessionsDir, { recursive: true });
+	return {
+		rootDir,
+		piSessionsDir
+	};
+}
+//#endregion
+//#region src/lib/prepare-runtime-profile.ts
+/** Validate and prepare a profile through the shared daemon execution path. */
+async function prepareRuntimeProfile(input) {
+	const { profile } = input;
+	assertRuntimeAdapterSupportsProfile(input.runtimeAdapter, profile);
+	const preparedRuntime = attestPreparedRuntime(await input.runtimeAdapter.prepare({ profile }), input.signingPrivateKey);
+	validateRuntimeProfilePrerequisites(profile, input.prerequisiteEnv, {
+		tools: preparedRuntime.tools,
+		executables: preparedRuntime.executables
+	});
+	assertGuestEnvironmentBoundary({
+		forwardEnv: profile.requiredEnv,
+		sandboxEnv: profile.sandboxConfig.env
+	});
+	await input.agent.tasks.registerExecutorManifest(await preparedRuntime.attestor.registration());
+	const sandbox = {
+		config: profile.sandboxConfig,
+		rootDir: profile.mountPath,
+		path: profile.source
+	};
+	const stateDirs = ensureDaemonStateDirs(sandbox.rootDir);
+	const slotIdentity = {
+		agentName: input.agentName,
+		runtimeProfileId: profile.id,
+		runtimeInstanceId: input.runtimeInstanceId
+	};
+	return {
+		profile,
+		preparedRuntime,
+		sandbox,
+		stateDirs,
+		slotIdentity,
+		executionPlans: createExecutionPlanCache({
+			stateDirs,
+			slotIdentity,
+			warmRetentionSec: input.warmRetentionSec,
+			workspacePolicy: {
+				defaultWorkspaceMode: profile.defaultWorkspaceMode,
+				allowedWorkspaceModes: profile.allowedWorkspaceModes
+			},
+			slotRegistry: input.slotRegistry,
+			runtimeSessionStore: input.runtimeSessionStore,
+			sourceAttemptResolver: input.sourceAttemptResolver
+		})
+	};
+}
+//#endregion
 //#region src/lib/runtime-context.ts
 var storage = new AsyncLocalStorage();
 function runWithDaemonRuntimeContext(context, callback) {
@@ -6331,13 +6348,14 @@ function createApiRuntimeSlotStore(args) {
 				sessionPath: input.sessionPath ?? void 0,
 				slotKey: input.slotKey,
 				taskType: input.taskType,
+				warmRetentionSec: input.warmRetentionSec,
 				workspaceId: input.workspaceId ?? void 0,
 				workspaceKind: input.workspaceKind,
 				worktreeBranch: input.worktreeBranch ?? void 0,
 				worktreePath: input.worktreePath ?? void 0
 			}, { teamId: input.teamId });
 		},
-		async finishSlot(teamId, taskId, attemptN, identity, slotKey, provider, model, sessionPath) {
+		async finishSlot(teamId, taskId, attemptN, identity, slotKey, provider, model, sessionPath, warmRetentionSec) {
 			await agent.runtimeSlots.finish({
 				agentName: identity.agentName,
 				attemptN,
@@ -6346,7 +6364,8 @@ function createApiRuntimeSlotStore(args) {
 				provider,
 				sessionPath: sessionPath ?? void 0,
 				slotKey,
-				taskId
+				taskId,
+				warmRetentionSec
 			}, { teamId });
 		},
 		async findLatestSlotByTaskAttempt(teamId, taskId, attemptN) {
@@ -6482,17 +6501,6 @@ function resolveOutputBranch(output) {
 	return typeof branch === "string" && branch.length > 0 ? branch : null;
 }
 //#endregion
-//#region src/lib/state-dir.ts
-function ensureDaemonStateDirs(mountPath) {
-	const rootDir = join(mountPath, ".moltnet", "d");
-	const piSessionsDir = join(rootDir, "pi-sessions");
-	mkdirSync(piSessionsDir, { recursive: true });
-	return {
-		rootDir,
-		piSessionsDir
-	};
-}
-//#endregion
 //#region src/lib/turn-event-logger.ts
 function makeTurnEventHandler(base, context = {}) {
 	const log = base.child({
@@ -6523,7 +6531,7 @@ async function runPolling(opts) {
 	const { values } = parseArgs({
 		args: opts.argv,
 		options: {
-			...commonOptionDefs(),
+			...runtimeCommandOptionDefs(),
 			team: { type: "string" },
 			"task-types": { type: "string" },
 			"correlation-id": { type: "string" },
@@ -6561,9 +6569,9 @@ async function runPolling(opts) {
 		return 1;
 	}
 	const diaryIds = parseCsv(values["diary-ids"]);
-	let baseCommon;
+	let commandOptions;
 	try {
-		baseCommon = parseCommonOptions(values);
+		commandOptions = parseRuntimeCommandOptions(values);
 	} catch (err) {
 		if (err instanceof MissingRequiredOptionError) {
 			console.error(`${err.message}\n`);
@@ -6572,6 +6580,7 @@ async function runPolling(opts) {
 		}
 		throw err;
 	}
+	const { identity, operations } = commandOptions;
 	const pollIntervalMs = optionalPositiveInt(values["poll-interval-ms"], "poll-interval-ms", 2e3);
 	const maxPollIntervalMs = optionalPositiveInt(values["max-poll-interval-ms"], "max-poll-interval-ms", 3e4);
 	const listLimit = optionalPositiveInt(values["list-limit"], "list-limit", 10);
@@ -6596,7 +6605,7 @@ async function runPolling(opts) {
 	const { ctx, signingPrivateKey, startupWhoami, agentIdentity, hostCapabilitySigner } = await (async () => {
 		let gate = "resolve_agent_context";
 		try {
-			const resolvedContext = await resolveAgentContext(baseCommon.agent, {
+			const resolvedContext = await resolveAgentContext(identity.agent, {
 				agentRootDir: explicitAgentRootDir,
 				credentialSource: cfg.credentialSource,
 				envApiUrl: cfg.apiUrl
@@ -6623,7 +6632,7 @@ async function runPolling(opts) {
 			});
 			gate = "resolve_agent_identity";
 			const agentIdentity = await resolveDaemonAgentIdentity({
-				agentName: baseCommon.agent,
+				agentName: identity.agent,
 				whoami,
 				credentialSource: cfg.credentialSource,
 				agentDir: resolvedContext.agentDir,
@@ -6643,9 +6652,9 @@ async function runPolling(opts) {
 		} catch (error) {
 			await logDaemonStartupFailure({
 				serviceName: `agent-daemon.${opts.modeLabel}`,
-				level: cfg.logLevel || (baseCommon.debug ? "debug" : "info"),
+				level: cfg.logLevel || (identity.debug ? "debug" : "info"),
 				gate,
-				agent: baseCommon.agent,
+				agent: identity.agent,
 				credentialSource: cfg.credentialSource,
 				error
 			});
@@ -6659,23 +6668,43 @@ async function runPolling(opts) {
 		teamId,
 		cwd: daemonRootDir
 	});
+	const { logger, shutdown: shutdownLogger } = createRootLogger({
+		name: `agent-daemon.${opts.modeLabel}`,
+		level: cfg.logLevel || (identity.debug ? "debug" : "info")
+	});
+	const rootLogger = logger.child({
+		mode: opts.modeLabel,
+		agent: identity.agent,
+		teamId,
+		runtimeProfileIds: resolvedProfiles.map((profile) => profile.id),
+		runtimeProfileNames: resolvedProfiles.map((profile) => profile.name)
+	});
 	const runtimeAdapter = opts.runtimeAdapter ?? defaultPiDaemonAdapter;
-	const preparedRuntimes = /* @__PURE__ */ new Map();
 	const profiles = [];
+	const runtimes = /* @__PURE__ */ new Map();
 	const skippedProfileBoundaries = [];
+	const slotRegistry = createApiRuntimeSlotStore({ agent: ctx.agent });
+	const runtimeSessionStore = createApiRuntimeSessionStore({
+		agent: ctx.agent,
+		logger: { warn: (context, message) => rootLogger.warn(context, message) }
+	});
+	const sourceAttemptResolver = createApiSourceAttemptResolver({ agent: ctx.agent });
+	const runtimeInstanceId = createRuntimeInstanceId();
 	for (const profile of resolvedProfiles) try {
-		assertRuntimeAdapterSupportsProfile(runtimeAdapter, profile);
-		const prepared = attestPreparedRuntime(await runtimeAdapter.prepare({ profile }), signingPrivateKey);
-		validateRuntimeProfilePrerequisites(profile, cfg.profilePrerequisiteEnv, {
-			tools: prepared.tools,
-			executables: prepared.executables
-		});
-		assertGuestEnvironmentBoundary({
-			forwardEnv: profile.requiredEnv,
-			sandboxEnv: profile.sandboxConfig.env
+		const prepared = await prepareRuntimeProfile({
+			agent: ctx.agent,
+			agentName: identity.agent,
+			profile,
+			prerequisiteEnv: cfg.profilePrerequisiteEnv,
+			runtimeAdapter,
+			runtimeInstanceId,
+			signingPrivateKey,
+			slotRegistry,
+			runtimeSessionStore,
+			sourceAttemptResolver,
+			warmRetentionSec: operations.warmRetentionSec
 		});
-		await ctx.agent.tasks.registerExecutorManifest(await prepared.attestor.registration());
-		preparedRuntimes.set(profile.id, prepared);
+		runtimes.set(profile.id, prepared);
 		profiles.push(profile);
 	} catch (error) {
 		if (!(error instanceof GuestEnvironmentBoundaryError)) throw error;
@@ -6688,84 +6717,22 @@ async function runPolling(opts) {
 		const details = skippedProfileBoundaries.map(({ profile, error }) => `${profile.name}: ${error.message}`).join("; ");
 		throw new Error(`No safe runtime profiles remain. ${details}`);
 	}
-	const slotRegistry = createApiRuntimeSlotStore({ agent: ctx.agent });
-	const runtimeSessionStore = createApiRuntimeSessionStore({
-		agent: ctx.agent,
-		logger: { warn: (context, message) => rootLogger.warn(context, message) }
-	});
-	const sourceAttemptResolver = createApiSourceAttemptResolver({ agent: ctx.agent });
-	const runtimeInstanceId = createRuntimeInstanceId();
 	const piAgentDir = await resolvePiAgentDir(cfg, profiles[0].mountPath, profiles);
 	process.once("exit", piAgentDir.cleanup);
 	activatePiCodingAgentDir(piAgentDir.path, piAgentDir.env);
-	const runtimes = /* @__PURE__ */ new Map();
-	for (const profile of profiles) {
-		const common = parseCommonOptions(values, { runtimeDefaults: {
-			leaseTtlSec: profile.leaseTtlSec,
-			heartbeatIntervalMs: profile.heartbeatIntervalMs,
-			maxBatchSize: profile.maxBatchSize,
-			maxTurns: profile.maxTurns,
-			maxBashTimeouts: profile.maxBashTimeouts,
-			warmSessionTtlSec: resolveProfileWarmSessionTtlSec(profile)
-		} });
-		const sandbox = {
-			config: profile.sandboxConfig,
-			rootDir: profile.mountPath,
-			path: profile.source
-		};
-		const stateDirs = ensureDaemonStateDirs(sandbox.rootDir);
-		const slotIdentity = {
-			agentName: common.agent,
-			runtimeProfileId: profile.id,
-			runtimeInstanceId
-		};
-		const executionPlans = createExecutionPlanCache({
-			stateDirs,
-			slotIdentity,
-			warmSessionTtlSec: common.warmSessionTtlSec,
-			workspacePolicy: {
-				defaultWorkspaceMode: profile.defaultWorkspaceMode,
-				allowedWorkspaceModes: profile.allowedWorkspaceModes
-			},
-			slotRegistry,
-			runtimeSessionStore,
-			sourceAttemptResolver
-		});
-		runtimes.set(profile.id, {
-			common,
-			profile,
-			sandbox,
-			stateDirs,
-			slotIdentity,
-			executionPlans,
-			preparedRuntime: preparedRuntimes.get(profile.id)
-		});
-	}
-	const firstRuntime = runtimes.get(profiles[0].id);
-	if (!firstRuntime) throw new Error("No runtime profiles resolved");
+	if (!runtimes.has(profiles[0].id)) throw new Error("No runtime profiles resolved");
 	const otelShutdown = await initWorkerOtel({
 		serviceName: opts.serviceName,
 		agent: ctx.agent,
 		endpoint: cfg.otelEndpoint,
 		resourceAttributes: {
 			"moltnet.team.id": teamId,
-			"moltnet.agent.name": baseCommon.agent,
+			"moltnet.agent.name": identity.agent,
 			"moltnet.credential.source": ctx.credentialSource,
 			"moltnet.runtime_profile.count": String(profiles.length),
 			"moltnet.runtime_profile.ids": profiles.map((p) => p.id).join(",")
 		}
 	});
-	const { logger, shutdown: shutdownLogger } = createRootLogger({
-		name: `agent-daemon.${opts.modeLabel}`,
-		level: cfg.logLevel || (baseCommon.debug ? "debug" : "info")
-	});
-	const rootLogger = logger.child({
-		mode: opts.modeLabel,
-		agent: baseCommon.agent,
-		teamId,
-		runtimeProfileIds: profiles.map((p) => p.id),
-		runtimeProfileNames: profiles.map((p) => p.name)
-	});
 	for (const { profile, error } of skippedProfileBoundaries) rootLogger.warn({
 		runtimeProfileId: profile.id,
 		runtimeProfileName: profile.name,
@@ -6821,13 +6788,10 @@ async function runPolling(opts) {
 				topK: profile.topK,
 				maxOutputTokens: profile.maxOutputTokens,
 				sandbox: runtime.sandbox.path,
-				leaseTtlSec: runtime.common.leaseTtlSec,
-				heartbeatIntervalMs: runtime.common.heartbeatIntervalMs,
-				maxTurns: runtime.common.maxTurns,
-				maxBashTimeouts: runtime.common.maxBashTimeouts,
-				warmSessionTtlSec: runtime.common.warmSessionTtlSec,
-				profileSessionTtlSec: profile.sessionTtlSec,
-				profileWorkspaceTtlSec: profile.workspaceTtlSec,
+				heartbeatIntervalMs: operations.heartbeatIntervalMs,
+				maxTurns: profile.maxTurns,
+				maxBashTimeouts: profile.maxBashTimeouts,
+				warmRetentionSec: operations.warmRetentionSec,
 				defaultWorkspaceMode: profile.defaultWorkspaceMode,
 				allowedWorkspaceModes: profile.allowedWorkspaceModes
 			};
@@ -6852,7 +6816,7 @@ async function runPolling(opts) {
 					runtimeSlotStore: slotRegistry,
 					taskReader: ctx.agent.tasks
 				}, {
-					agentName: selected.common.agent,
+					agentName: identity.agent,
 					mainWorktree: resolveMainWorktree$1(selected.sandbox.rootDir),
 					runtimeInstanceId,
 					runtimeProfileId: profile.id,
@@ -6885,12 +6849,8 @@ async function runPolling(opts) {
 				teamId,
 				taskTypes: taskTypes.length > 0 ? taskTypes : void 0,
 				correlationId: values["correlation-id"],
-				profiles: profiles.map((profile) => ({
-					profileId: profile.id,
-					leaseTtlSec: requireRuntime(runtimes, profile.id).common.leaseTtlSec
-				})),
+				profiles: profiles.map((profile) => ({ profileId: profile.id })),
 				diaryIds: diaryIds.length > 0 ? diaryIds : void 0,
-				leaseTtlSec: firstRuntime.common.leaseTtlSec,
 				listLimit,
 				pollIntervalMs,
 				maxPollIntervalMs,
@@ -6898,7 +6858,7 @@ async function runPolling(opts) {
 				stopWhenEmpty: opts.stopWhenEmpty,
 				waitForFirstTaskMs: waitForFirstTaskSec * 1e3,
 				waitAfterTaskMs: waitAfterTaskSec * 1e3,
-				debug: baseCommon.debug,
+				debug: identity.debug,
 				traceIdlePolling: cfg.traceIdlePolling,
 				logger: rootLogger,
 				executorFingerprints: Object.fromEntries(profiles.map((profile) => [profile.id, requireRuntime(runtimes, profile.id).preparedRuntime.attestor.fingerprint])),
@@ -6907,14 +6867,11 @@ async function runPolling(opts) {
 				sourceAttemptResolver
 			}),
 			makeReporter: (claimedTask) => {
-				const selected = runtimeForClaimedTask(runtimes, claimedTask);
 				return new ApiTaskReporter({
 					tasks: ctx.agent.tasks,
 					teamId: claimedTask.task.teamId,
-					leaseTtlSec: selected.common.leaseTtlSec,
-					heartbeatIntervalMs: selected.common.heartbeatIntervalMs,
-					maxBatchSize: selected.common.maxBatchSize,
-					flushIntervalMs: selected.common.flushIntervalMs
+					heartbeatIntervalMs: operations.heartbeatIntervalMs,
+					logger: rootLogger
 				});
 			},
 			onTaskFinished: async (output, claimedTask) => {
@@ -6962,7 +6919,7 @@ async function runPolling(opts) {
 			},
 			executeTask: async (claimedTask, reporter) => {
 				const selected = runtimeForClaimedTask(runtimes, claimedTask);
-				const { common, executionPlans, profile, sandbox, slotIdentity, stateDirs } = selected;
+				const { executionPlans, profile, sandbox, slotIdentity, stateDirs } = selected;
 				if (runtimeCredentialConfig) await observeGovernancePlanSafely({
 					config: runtimeCredentialConfig,
 					profile,
@@ -7076,10 +7033,11 @@ async function runPolling(opts) {
 					worktreeBranch: executionPlan.worktreeBranch,
 					workspaceKind: executionPlan.workspaceKind,
 					lastTaskId: claimedTask.task.id,
-					lastAttemptN: claimedTask.attemptN
+					lastAttemptN: claimedTask.attemptN,
+					warmRetentionSec: operations.warmRetentionSec
 				});
 				const rawExecuteTask = selected.preparedRuntime.createTaskExecutor({
-					agentName: common.agent,
+					agentName: identity.agent,
 					moltnetAgent: ctx.agent,
 					agentIdentity,
 					hostCapabilitySigner,
@@ -7109,8 +7067,8 @@ async function runPolling(opts) {
 					makeExecutionPlan: (task) => executionPlans.getOrCreate(task),
 					makeOnTurnEvent: makeTurnEventHandlerFactory(taskLogger),
 					toolPolicyLogger: taskLogger,
-					maxTurns: common.maxTurns,
-					maxBashTimeouts: common.maxBashTimeouts
+					maxTurns: profile.maxTurns,
+					maxBashTimeouts: profile.maxBashTimeouts
 				});
 				try {
 					active = {
@@ -7131,7 +7089,7 @@ async function runPolling(opts) {
 				} finally {
 					active = null;
 					executionPlans.delete(claimedTask);
-					if (executionPlan.slotKey) await slotRegistry.finishSlot(claimedTask.task.teamId, claimedTask.task.id, claimedTask.attemptN, slotIdentity, executionPlan.slotKey, profile.provider, profile.model, executionPlan.sessionPersistence ? resolveLatestPiSessionPath(executionPlan.sessionPersistence.sessionDir) : null);
+					if (executionPlan.slotKey) await slotRegistry.finishSlot(claimedTask.task.teamId, claimedTask.task.id, claimedTask.attemptN, slotIdentity, executionPlan.slotKey, profile.provider, profile.model, executionPlan.sessionPersistence ? resolveLatestPiSessionPath(executionPlan.sessionPersistence.sessionDir) : null, operations.warmRetentionSec);
 				}
 			}
 		});
@@ -7207,7 +7165,7 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 	const { values } = parseArgs({
 		args: argv,
 		options: {
-			...commonOptionDefs(),
+			...runtimeCommandOptionDefs(),
 			"task-id": {
 				type: "string",
 				short: "t"
@@ -7228,9 +7186,9 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 		console.error(ONCE_HELP);
 		return 1;
 	}
-	let opts;
+	let commandOptions;
 	try {
-		opts = parseCommonOptions(values);
+		commandOptions = parseRuntimeCommandOptions(values);
 	} catch (err) {
 		if (err instanceof MissingRequiredOptionError) {
 			console.error(`${err.message}\n`);
@@ -7239,6 +7197,7 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 		}
 		throw err;
 	}
+	const { identity, operations } = commandOptions;
 	if (values.sandbox) {
 		console.error("Cannot use --sandbox. Remote runtime profiles define sandbox policy.");
 		return 1;
@@ -7249,12 +7208,11 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 		bindings: cfg.credentialBindings
 	};
 	const runtimeCredentialConfig = resolveCredentialEnforcement(cfg.credentialEnforcement, credentialSources) === "off" ? null : loadRuntimeCredentialConfig(credentialSources);
-	const initialOpts = opts;
 	const explicitAgentRootDir = values["agent-root"] ? resolve(process.cwd(), values["agent-root"]) : void 0;
 	const { ctx, signingPrivateKey, agentIdentity, hostCapabilitySigner } = await (async () => {
 		let gate = "resolve_agent_context";
 		try {
-			const resolvedContext = await resolveAgentContext(initialOpts.agent, {
+			const resolvedContext = await resolveAgentContext(identity.agent, {
 				agentRootDir: explicitAgentRootDir,
 				credentialSource: cfg.credentialSource,
 				envApiUrl: cfg.apiUrl
@@ -7281,7 +7239,7 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 			});
 			gate = "resolve_agent_identity";
 			const agentIdentity = await resolveDaemonAgentIdentity({
-				agentName: initialOpts.agent,
+				agentName: identity.agent,
 				whoami,
 				credentialSource: cfg.credentialSource,
 				agentDir: resolvedContext.agentDir,
@@ -7300,9 +7258,9 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 		} catch (error) {
 			await logDaemonStartupFailure({
 				serviceName: "agent-daemon.once",
-				level: cfg.logLevel || (initialOpts.debug ? "debug" : "info"),
+				level: cfg.logLevel || (identity.debug ? "debug" : "info"),
 				gate,
-				agent: initialOpts.agent,
+				agent: identity.agent,
 				credentialSource: cfg.credentialSource,
 				error
 			});
@@ -7316,34 +7274,23 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 		teamId: values.team,
 		cwd: daemonRootDir
 	});
-	assertRuntimeAdapterSupportsProfile(runtimeAdapter, profile);
-	const preparedRuntime = attestPreparedRuntime(await runtimeAdapter.prepare({ profile }), signingPrivateKey);
-	validateRuntimeProfilePrerequisites(profile, cfg.profilePrerequisiteEnv, {
-		tools: preparedRuntime.tools,
-		executables: preparedRuntime.executables
+	const { logger, shutdown: shutdownLogger } = createRootLogger({
+		name: "agent-daemon.once",
+		level: cfg.logLevel || (identity.debug ? "debug" : "info")
 	});
-	assertGuestEnvironmentBoundary({
-		forwardEnv: profile.requiredEnv,
-		sandboxEnv: profile.sandboxConfig.env
+	const rootLogger = logger.child({
+		mode: "once",
+		agent: identity.agent,
+		provider: profile.provider,
+		model: profile.model,
+		thinkingLevel: profile.thinkingLevel,
+		temperature: profile.temperature,
+		topP: profile.topP,
+		topK: profile.topK,
+		maxOutputTokens: profile.maxOutputTokens,
+		runtimeProfileId: profile.id,
+		runtimeProfileName: profile.name
 	});
-	await ctx.agent.tasks.registerExecutorManifest(await preparedRuntime.attestor.registration());
-	opts = parseCommonOptions(values, { runtimeDefaults: {
-		leaseTtlSec: profile.leaseTtlSec,
-		heartbeatIntervalMs: profile.heartbeatIntervalMs,
-		maxBatchSize: profile.maxBatchSize,
-		maxTurns: profile.maxTurns,
-		maxBashTimeouts: profile.maxBashTimeouts,
-		warmSessionTtlSec: resolveProfileWarmSessionTtlSec(profile)
-	} });
-	const sandbox = {
-		config: profile.sandboxConfig,
-		rootDir: profile.mountPath,
-		path: profile.source
-	};
-	const piAgentDir = await resolvePiAgentDir(cfg, sandbox.rootDir, [profile]);
-	process.once("exit", piAgentDir.cleanup);
-	activatePiCodingAgentDir(piAgentDir.path, piAgentDir.env);
-	const stateDirs = ensureDaemonStateDirs(sandbox.rootDir);
 	const slotRegistry = createApiRuntimeSlotStore({ agent: ctx.agent });
 	const runtimeSessionStore = createApiRuntimeSessionStore({
 		agent: ctx.agent,
@@ -7351,30 +7298,29 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 	});
 	const sourceAttemptResolver = createApiSourceAttemptResolver({ agent: ctx.agent });
 	const runtimeInstanceId = createRuntimeInstanceId();
-	const slotIdentity = {
-		agentName: opts.agent,
-		runtimeProfileId: profile.id,
-		runtimeInstanceId
-	};
-	const executionPlans = createExecutionPlanCache({
-		stateDirs,
-		slotIdentity,
-		warmSessionTtlSec: opts.warmSessionTtlSec,
-		workspacePolicy: {
-			defaultWorkspaceMode: profile.defaultWorkspaceMode,
-			allowedWorkspaceModes: profile.allowedWorkspaceModes
-		},
+	const { executionPlans, preparedRuntime, sandbox, slotIdentity, stateDirs } = await prepareRuntimeProfile({
+		agent: ctx.agent,
+		agentName: identity.agent,
+		profile,
+		prerequisiteEnv: cfg.profilePrerequisiteEnv,
+		runtimeAdapter,
+		runtimeInstanceId,
+		signingPrivateKey,
 		slotRegistry,
 		runtimeSessionStore,
-		sourceAttemptResolver
+		sourceAttemptResolver,
+		warmRetentionSec: operations.warmRetentionSec
 	});
+	const piAgentDir = await resolvePiAgentDir(cfg, sandbox.rootDir, [profile]);
+	process.once("exit", piAgentDir.cleanup);
+	activatePiCodingAgentDir(piAgentDir.path, piAgentDir.env);
 	const otelShutdown = await initWorkerOtel({
 		serviceName: "moltnet.agent-daemon.once",
 		agent: ctx.agent,
 		endpoint: cfg.otelEndpoint,
 		resourceAttributes: {
 			"moltnet.task.id": taskId,
-			"moltnet.agent.name": opts.agent,
+			"moltnet.agent.name": identity.agent,
 			"moltnet.credential.source": ctx.credentialSource,
 			"moltnet.llm.provider": profile.provider,
 			"moltnet.llm.model": profile.model,
@@ -7386,34 +7332,14 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 			"moltnet.runtime_profile.id": profile.id
 		}
 	});
-	const { logger, shutdown: shutdownLogger } = createRootLogger({
-		name: "agent-daemon.once",
-		level: cfg.logLevel || (opts.debug ? "debug" : "info")
-	});
-	const rootLogger = logger.child({
-		mode: "once",
-		agent: opts.agent,
-		provider: profile.provider,
-		model: profile.model,
-		thinkingLevel: profile.thinkingLevel,
-		temperature: profile.temperature,
-		topP: profile.topP,
-		topK: profile.topK,
-		maxOutputTokens: profile.maxOutputTokens,
-		runtimeProfileId: profile.id,
-		runtimeProfileName: profile.name
-	});
 	rootLogger.info({
 		sandbox: sandbox.path,
 		taskId,
-		leaseTtlSec: opts.leaseTtlSec,
-		heartbeatIntervalMs: opts.heartbeatIntervalMs,
-		maxTurns: opts.maxTurns,
-		maxBashTimeouts: opts.maxBashTimeouts,
-		warmSessionTtlSec: opts.warmSessionTtlSec,
+		heartbeatIntervalMs: operations.heartbeatIntervalMs,
+		maxTurns: profile.maxTurns,
+		maxBashTimeouts: profile.maxBashTimeouts,
+		warmRetentionSec: operations.warmRetentionSec,
 		profileId: profile.id,
-		profileSessionTtlSec: profile.sessionTtlSec,
-		profileWorkspaceTtlSec: profile.workspaceTtlSec,
 		piAgentDir: piAgentDir.path,
 		piAgentDirSource: piAgentDir.source
 	}, "agent-daemon.starting");
@@ -7425,7 +7351,7 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 			runtimeSlotStore: slotRegistry,
 			taskReader: ctx.agent.tasks
 		}, {
-			agentName: opts.agent,
+			agentName: identity.agent,
 			mainWorktree: resolveMainWorktree(sandbox.rootDir),
 			runtimeInstanceId,
 			runtimeProfileId: profile.id,
@@ -7471,7 +7397,7 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 	});
 	try {
 		const rawExecuteTask = preparedRuntime.createTaskExecutor({
-			agentName: opts.agent,
+			agentName: identity.agent,
 			moltnetAgent: ctx.agent,
 			agentIdentity,
 			hostCapabilitySigner,
@@ -7501,8 +7427,8 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 			makeExecutionPlan: (claimedTask) => executionPlans.getOrCreate(claimedTask),
 			onTurnEvent: makeTurnEventHandler(rootLogger, { taskId }),
 			toolPolicyLogger: rootLogger,
-			maxTurns: opts.maxTurns,
-			maxBashTimeouts: opts.maxBashTimeouts
+			maxTurns: profile.maxTurns,
+			maxBashTimeouts: profile.maxBashTimeouts
 		});
 		const executeTask = async (claimedTask, reporter) => {
 			if (runtimeCredentialConfig) await observeGovernancePlanSafely({
@@ -7559,7 +7485,8 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 				worktreeBranch: executionPlan.worktreeBranch,
 				workspaceKind: executionPlan.workspaceKind,
 				lastTaskId: claimedTask.task.id,
-				lastAttemptN: claimedTask.attemptN
+				lastAttemptN: claimedTask.attemptN,
+				warmRetentionSec: operations.warmRetentionSec
 			});
 			activeAttemptN = claimedTask.attemptN;
 			try {
@@ -7577,7 +7504,7 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 			} finally {
 				activeAttemptN = null;
 				executionPlans.delete(claimedTask);
-				if (executionPlan.slotKey) await slotRegistry.finishSlot(claimedTask.task.teamId, claimedTask.task.id, claimedTask.attemptN, slotIdentity, executionPlan.slotKey, profile.provider, profile.model, executionPlan.sessionPersistence ? resolveLatestPiSessionPath(executionPlan.sessionPersistence.sessionDir) : null);
+				if (executionPlan.slotKey) await slotRegistry.finishSlot(claimedTask.task.teamId, claimedTask.task.id, claimedTask.attemptN, slotIdentity, executionPlan.slotKey, profile.provider, profile.model, executionPlan.sessionPersistence ? resolveLatestPiSessionPath(executionPlan.sessionPersistence.sessionDir) : null, operations.warmRetentionSec);
 			}
 		};
 		const writeCorrelationAnchors = makePrBodyAnchorWriter({
@@ -7590,17 +7517,14 @@ async function runOnce(argv, runtimeAdapter = defaultPiDaemonAdapter) {
 				agent: ctx.agent,
 				taskId,
 				teamId: profile.teamId,
-				leaseTtlSec: opts.leaseTtlSec,
 				profileId: profile.id,
 				executorFingerprint: preparedRuntime.attestor.fingerprint
 			}),
 			makeReporter: () => new ApiTaskReporter({
 				tasks: ctx.agent.tasks,
 				teamId: profile.teamId,
-				leaseTtlSec: opts.leaseTtlSec,
-				heartbeatIntervalMs: opts.heartbeatIntervalMs,
-				maxBatchSize: opts.maxBatchSize,
-				flushIntervalMs: opts.flushIntervalMs
+				heartbeatIntervalMs: operations.heartbeatIntervalMs,
+				logger: rootLogger
 			}),
 			onTaskFinished: async (output, claimedTask) => {
 				const resolved = await slotRegistry.findLatestSlotByTaskAttempt(claimedTask.task.teamId, claimedTask.task.id, claimedTask.attemptN);
@@ -9842,6 +9766,7 @@ var RunManager = class {
 				extraArgs: ["--agent-root", agentRoot]
 			};
 		})();
+		const runtimeSettings = this.options.runtimeSettings ?? DEFAULT_LOCAL_OPERATIONAL_SETTINGS;
 		const args = [
 			...runtimeModule ? ["--runtime", runtimeModule] : [],
 			spec.mode,
@@ -9852,6 +9777,10 @@ var RunManager = class {
 			...spec.profiles.flatMap((profile) => ["--profile", profile]),
 			"--task-types",
 			spec.taskTypes.join(","),
+			"--heartbeat-interval-ms",
+			String(runtimeSettings.heartbeatIntervalMs),
+			"--warm-retention-sec",
+			String(runtimeSettings.warmRetentionSec),
 			...target.extraArgs
 		];
 		if (activation.source === "managed") {
@@ -10522,7 +10451,11 @@ var AgentServerStatusSchema = Type.Object({
 	identities: Type.Array(schemaRef(AgentServerIdentitySchema)),
 	selectedIdentity: Type.Optional(Type.String()),
 	providers: Type.Record(Type.String(), schemaRef(AgentServerProviderSchema)),
-	runs: Type.Array(schemaRef(AgentServerRunSchema))
+	runs: Type.Array(schemaRef(AgentServerRunSchema)),
+	runtimeSettings: Type.Object({
+		heartbeatIntervalMs: Type.Integer({ minimum: 0 }),
+		warmRetentionSec: Type.Integer({ minimum: 0 })
+	})
 }, { $id: "AgentServerStatus" });
 var PairingStartedSchema = Type.Object({
 	pairingId: Type.String(),
@@ -10996,7 +10929,8 @@ function registerStatusRoute(app, options, requirePairedOrigin) {
 			identities: identityViews(store),
 			...selected ? { selectedIdentity: selected } : {},
 			providers: options.providers.list(),
-			runs: runViews(runs)
+			runs: runViews(runs),
+			runtimeSettings: options.runtimeSettings ?? DEFAULT_LOCAL_OPERATIONAL_SETTINGS
 		};
 	});
 }
@@ -11496,6 +11430,8 @@ async function runAgentServer(argv) {
 			"allowed-origins": { type: "string" },
 			root: { type: "string" },
 			"api-url": { type: "string" },
+			"heartbeat-interval-ms": { type: "string" },
+			"warm-retention-sec": { type: "string" },
 			remove: { type: "boolean" }
 		}
 	});
@@ -11507,6 +11443,7 @@ async function runAgentServer(argv) {
 	const allowedOrigins = parseAllowedOrigins(values["allowed-origins"] ?? (envConfig.allowedOrigins || DEFAULT_ALLOWED_ORIGINS));
 	const root = values.root ?? resolveAgentServerRoot({ root: envConfig.root });
 	const defaultApiUrl = values["api-url"] ?? (envConfig.apiUrl || DEFAULT_API_URL);
+	const runtimeSettings = parseLocalOperationalSettings(values);
 	const store = new AgentServerStore(root).ensure();
 	if (trustRequested) return runTrustCommand(commandArgs, root);
 	const { logger, shutdown: shutdownLogger } = createRootLogger({
@@ -11540,7 +11477,8 @@ async function runAgentServer(argv) {
 					externalSecretProviders,
 					baseEnv: processEnvSnapshot(),
 					logger,
-					runtimeRegistry: new RuntimeRegistry(store.root)
+					runtimeRegistry: new RuntimeRegistry(store.root),
+					runtimeSettings
 				});
 				const tls = isMacos() ? await ensureTrustedLocalTls(root) : void 0;
 				const app = buildAgentServer({
@@ -11559,6 +11497,7 @@ async function runAgentServer(argv) {
 						cert: tls.cert
 					} } : {},
 					defaultApiUrl,
+					runtimeSettings,
 					...envConfig.activeIdentity ? { activeIdentity: envConfig.activeIdentity } : {},
 					version: "dev",
 					logger,
@@ -11782,7 +11721,7 @@ async function runSyncSessions(argv) {
 	const { values } = parseArgs({
 		args: argv,
 		options: {
-			...commonOptionDefs(),
+			...identityOptionDefs(),
 			team: { type: "string" },
 			"runtime-profile-id": { type: "string" },
 			state: { type: "string" },
@@ -11795,9 +11734,9 @@ async function runSyncSessions(argv) {
 		console.error(SYNC_SESSIONS_HELP);
 		return 1;
 	}
-	let opts;
+	let identity;
 	try {
-		opts = parseCommonOptions(values);
+		identity = parseIdentityProcessOptions(values);
 	} catch (err) {
 		if (err instanceof MissingRequiredOptionError) {
 			console.error(`${err.message}\n`);
@@ -11811,7 +11750,7 @@ async function runSyncSessions(argv) {
 	const agentRootDir = resolve(process.cwd(), values["agent-root"] ?? process.cwd());
 	const explicitAgentRootDir = values["agent-root"] ? resolve(process.cwd(), values["agent-root"]) : void 0;
 	const cfg = loadConfig();
-	const ctx = await resolveAgentContext(opts.agent, {
+	const ctx = await resolveAgentContext(identity.agent, {
 		credentialSource: cfg.credentialSource,
 		envApiUrl: cfg.apiUrl,
 		agentRootDir: explicitAgentRootDir
@@ -11826,7 +11765,7 @@ async function runSyncSessions(argv) {
 		runtimeSlotStore: createApiRuntimeSlotStore({ agent: ctx.agent }),
 		taskReader: ctx.agent.tasks
 	}, {
-		agentName: opts.agent,
+		agentName: identity.agent,
 		dryRun: values["dry-run"] === true,
 		limit,
 		runtimeProfileId: values["runtime-profile-id"],
@@ -12003,7 +11942,7 @@ async function writeCache(cache) {
 }
 //#endregion
 //#region src/version.ts
-var DAEMON_VERSION = "0.57.0";
+var DAEMON_VERSION = "0.57.1";
 //#endregion
 //#region src/cli.ts
 async function runAgentDaemonCli(options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/agent-daemon",
-  "version": "0.57.0",
+  "version": "0.57.1",
   "license": "AGPL-3.0-only",
   "type": "module",
   "description": "Universal MoltNet agent daemon host with a built-in Pi/Gondolin runtime and support for trusted operator-owned runtime modules. CLI: moltnet-agent.",
@@ -85,10 +85,10 @@
     "proper-lockfile": "4.1.2",
     "reflect-metadata": "^0.2.2",
     "typebox": "^1.2.8",
-    "@themoltnet/os-keyring": "0.3.0",
     "@themoltnet/agent-runtime": "1.0.3",
-    "@themoltnet/pi-runtime": "0.15.3",
-    "@themoltnet/sdk": "0.142.0"
+    "@themoltnet/sdk": "0.142.0",
+    "@themoltnet/pi-runtime": "0.16.0",
+    "@themoltnet/os-keyring": "0.3.0"
   },
   "devDependencies": {
     "@fastify/swagger": "^9.6.1",
@@ -98,16 +98,16 @@
     "vite": "^8.0.0",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.0.0",
+    "@moltnet/api-client": "0.1.0",
     "@moltnet/agent-eval": "0.1.0",
-    "@moltnet/crypto-service": "0.1.0",
-    "@moltnet/bootstrap": "0.1.0",
     "@moltnet/execution-integrations": "0.1.0",
+    "@moltnet/crypto-service": "0.1.0",
     "@moltnet/execution-plan": "0.1.0",
-    "@moltnet/api-client": "0.1.0",
-    "@moltnet/models": "0.1.0",
+    "@moltnet/loopback-companion": "0.1.0",
     "@moltnet/observability": "0.1.0",
+    "@moltnet/models": "0.1.0",
+    "@moltnet/bootstrap": "0.1.0",
     "@moltnet/runtime-profiles": "0.1.0",
-    "@moltnet/loopback-companion": "0.1.0",
     "@moltnet/tasks": "0.1.0"
   },
   "nx": {