@themoltnet/pi-extension 0.18.1 → 0.19.1

package/README.md

@@ -140,7 +140,14 @@ the base snapshot is used (Alpine + git + gh + MoltNet CLI + agent user).
     "cpus": 2,
     "memory": "6G"
   },
-  "resumeCommands": ["corepack enable"],
+  "resumeCommands": [
+    {
+      "run": "corepack enable",
+      "when": {
+        "workspaceMode": ["shared_mount", "dedicated_worktree"]
+      }
+    }
+  ],
   "snapshot": {
     "allowedHosts": ["unofficial-builds.nodejs.org"],
     "overlaySize": "8G",
@@ -191,10 +198,34 @@ Important properties:
 - not part of the snapshot cache key
 - each command runs in a fresh shell with `set -eu` and `set -o pipefail`
 - first non-zero exit aborts VM resume
+- object form supports `when.workspaceMode` so bootstrap can key off the
+  effective mounted workspace shape instead of task type
 
 This split exists so repo-specific bootstrap can live in `sandbox.json` while
 `pi-extension` stays consumer-agnostic.
 
+Object form:
+
+```json
+{
+  "retries": 2,
+  "retryBackoffMs": 5000,
+  "run": "cd /workspace && pnpm install --frozen-lockfile",
+  "when": {
+    "workspaceMode": ["shared_mount", "dedicated_worktree"]
+  }
+}
+```
+
+`when.workspaceMode` matches the executor's effective workspace shape:
+
+- `shared_mount`: task runs directly against the mounted checkout
+- `dedicated_worktree`: task runs in a disposable git worktree
+- `scratch_mount`: task runs in an empty scratch workspace with no repo checkout
+
+Use this when a resume step assumes a repository exists under `/workspace` and
+should be skipped for repo-free scratch runs.
+
 ### `vfs`
 
 VFS shadow configuration — hide host paths from the guest mount.

package/dist/index.d.ts

@@ -67,6 +67,7 @@ declare interface BuildAgentSessionArgs {
      */
     sessionPersistence?: {
         sessionDir: string;
+        forkFromSessionPath?: string | null;
     };
 }
 
@@ -92,13 +93,18 @@ declare interface ClaimedTask {
  *            name under the runtime's skill discovery path. Must be
  *            kebab-case-safe (alphanumeric + dashes/underscores).
  * - `binding` — how the bytes are delivered to the LLM (see above).
- * - `content` — the actual bytes (UTF-8 text). Capped at 32 KiB per
+ * - `content` — the actual bytes (UTF-8 text). Capped at 64 KiB per
  *               entry; total per-task context bytes are bounded by the
  *               soft `maxItems` cap and per-binding daemon limits.
+ *               Raised from 32 KiB in 2026-05 — protocol-heavy operator
+ *               skills (e.g. `.claude/skills/legreffier/SKILL.md`) ship
+ *               at ~35 KiB inline, and the original cap was sized for
+ *               short example skills, not the kind of skill the eval
+ *               substrate is dogfooded on (#943, #823).
  */
 declare const ContextRef: TObject<    {
     slug: TString;
-    binding: TUnion<[TLiteral<"skill">, TLiteral<"prompt_prefix">, TLiteral<"user_inline">]>;
+    binding: TUnion<[TLiteral<"skill">, TLiteral<"context_inline">, TLiteral<"prompt_prefix">, TLiteral<"user_inline">]>;
     content: TString;
 }>;
 
@@ -465,9 +471,16 @@ export declare interface PiOtelOptions {
 
 export declare interface PiSessionPersistencePlan {
     sessionDir: string;
+    forkFromSessionPath?: string | null;
 }
 
 export declare interface PiTaskExecutionPlan {
+    /**
+     * Effective workspace mode for this task instance.
+     * `scratch_mount` means mount an empty scratch directory rather than the
+     * daemon checkout.
+     */
+    workspaceMode: 'shared_mount' | 'dedicated_worktree' | 'scratch_mount';
     /**
      * Daemon-local reuse key. When set alongside `workspaceScope: 'session'`,
      * dedicated worktrees may be retained and reopened across related tasks.
@@ -488,6 +501,12 @@ export declare interface PiTaskExecutionPlan {
      * `attempt` = disposable; `session` = keep stable for the reuse key.
      */
     workspaceScope: 'attempt' | 'session';
+    /**
+     * Optional existing workspace root to attach instead of creating a fresh
+     * shared/worktree/scratch workspace. Used for read-only-ish producer
+     * inspection by applying VFS shadowing on top of the mounted path.
+     */
+    workspaceAttachment?: PiWorkspaceAttachmentPlan | null;
     /**
      * Optional location for file-backed Pi session history. When omitted,
      * the executor keeps the conversation in memory for this attempt only.
@@ -497,8 +516,36 @@ export declare interface PiTaskExecutionPlan {
 
 export declare type PiTaskExecutionPlanFactory = (claimedTask: ClaimedTask) => PiTaskExecutionPlan | null;
 
+declare interface PiWorkspaceAttachmentPlan {
+    mountPath: string;
+    cwdPath: string;
+    shadowWrites?: 'deny' | 'tmpfs';
+}
+
 export declare function resolveTaskWorktreePath(mainRepo: string, workspaceId: string): string;
 
+export declare interface ResumeCommand {
+    /** Shell command, same semantics as the string form. */
+    run: string;
+    /** Optional generic runtime predicate for whether this step should run. */
+    when?: ResumeCommandWhen;
+    /** Additional attempts on non-zero exit. Default 0. */
+    retries?: number;
+    /** Linear backoff between attempts in ms. Delay before attempt N+1 is
+     *  `(N + 1) * retryBackoffMs` (so 2s, 4s, … with the default). */
+    retryBackoffMs?: number;
+}
+
+/** Structured form of a resume command with optional retry policy. */
+declare interface ResumeCommandWhen {
+    /**
+     * Effective workspace mode(s) that should run this command.
+     * Evaluated by the runtime from the mounted workspace shape rather than
+     * from task type semantics.
+     */
+    workspaceMode?: ('shared_mount' | 'dedicated_worktree' | 'scratch_mount')[];
+}
+
 /**
  * Resume a VM from a checkpoint, inject credentials, configure egress +
  * TLS. Returns the managed VM handle.
@@ -524,8 +571,18 @@ export declare interface SandboxConfig {
      *  every resume without triggering a snapshot rebuild. Each command
      *  runs in a fresh shell with `set -eu` and `set -o pipefail`; a
      *  non-zero exit (including from any segment of a pipeline) aborts
-     *  resume with the failing command's stderr/stdout tail. */
-    resumeCommands?: string[];
+     *  resume with the failing command's stderr/stdout tail.
+     *
+     *  Each entry is either a raw string (no retries) or an object
+     *  `{ run, when?, retries?, retryBackoffMs? }`. `when` gates the
+     *  command on generic runtime properties such as effective
+     *  `workspaceMode`; this keeps sandbox policy decoupled from task
+     *  types. `retries` is the number of ADDITIONAL attempts after the
+     *  first failure (default 0 = no retry). Use for steps that hit the
+     *  network and may legitimately race DHCP/registry availability on a
+     *  fresh resume (e.g. `pnpm install`). The wrapped command must be
+     *  idempotent. */
+    resumeCommands?: (string | ResumeCommand)[];
     /** VFS shadow settings — hide host paths from the guest. */
     vfs?: {
         /** Paths (relative to workspace root) to shadow from the host mount. */
@@ -661,7 +718,7 @@ declare type Task = Static<typeof Task>;
 /** Reusable input fragment for any task type. Soft cap at 5 items. */
 declare const TaskContext: TArray<TObject<    {
     slug: TString;
-    binding: TUnion<[TLiteral<"skill">, TLiteral<"prompt_prefix">, TLiteral<"user_inline">]>;
+    binding: TUnion<[TLiteral<"skill">, TLiteral<"context_inline">, TLiteral<"prompt_prefix">, TLiteral<"user_inline">]>;
     content: TString;
 }>>;
 
@@ -814,6 +871,8 @@ export declare interface VmConfig {
     agentName: string;
     /** Host directory to mount at /workspace in the VM. */
     mountPath: string;
+    /** Effective workspace shape selected by the caller. */
+    workspaceMode?: 'shared_mount' | 'dedicated_worktree' | 'scratch_mount';
     /** Additional hosts to allow in egress policy. */
     extraAllowedHosts?: string[];
     /** Full sandbox config (vfs shadows, env overrides). */