@themoltnet/pi-extension 0.19.6 → 0.20.1

package/dist/index.d.ts

@@ -19,8 +19,11 @@ import { TObject } from '@sinclair/typebox';
 import { ToolDefinition } from '@earendil-works/pi-coding-agent';
 import { TOptional } from '@sinclair/typebox';
 import { TRecord } from '@sinclair/typebox';
+import { TRecursive } from '@sinclair/typebox';
+import { TRefUnsafe } from '@sinclair/typebox';
 import { TSchema } from '@sinclair/typebox';
 import { TString } from '@sinclair/typebox';
+import { TThis } from '@sinclair/typebox';
 import { TUnion } from '@sinclair/typebox';
 import { TUnknown } from '@sinclair/typebox';
 import { VM } from '@earendil-works/gondolin';
@@ -81,7 +84,7 @@ declare interface ClaimedTask {
 }
 
 /**
- * One context entry. Bytes are inlined: the imposer chose them, and the
+ * One context entry. Bytes are inlined: the proposer chose them, and the
  * task's `inputCid` already pins the entire input — including
  * `context[]` — so we don't need a separate per-entry hash, fetcher, or
  * flagged-content gate. Tasks reference rendered packs (or any other
@@ -702,15 +705,29 @@ declare const Task: TObject<    {
         }>>;
     }>>;
     correlationId: TUnion<[TString, TNull]>;
-    imposedByAgentId: TUnion<[TString, TNull]>;
-    imposedByHumanId: TUnion<[TString, TNull]>;
+    proposedByAgentId: TUnion<[TString, TNull]>;
+    proposedByHumanId: TUnion<[TString, TNull]>;
     acceptedAttemptN: TUnion<[TNumber, TNull]>;
+    claimCondition: TUnion<[TRecursive<TUnion<[TObject<    {
+        op: TLiteral<"all">;
+        conditions: TArray<TThis>;
+    }>, TObject<    {
+        op: TLiteral<"any">;
+        conditions: TArray<TThis>;
+    }>, TObject<    {
+        op: TLiteral<"task_status">;
+        taskId: TString;
+        statuses: TArray<TRefUnsafe<TUnion<[TLiteral<"waiting">, TLiteral<"queued">, TLiteral<"dispatched">, TLiteral<"running">, TLiteral<"completed">, TLiteral<"failed">, TLiteral<"cancelled">, TLiteral<"expired">]>>>;
+    }>, TObject<    {
+        op: TLiteral<"task_accepted">;
+        taskId: TString;
+    }>]>>, TNull]>;
     requiredExecutorTrustLevel: TUnion<[TLiteral<"selfDeclared">, TLiteral<"agentSigned">, TLiteral<"releaseVerifiedTool">, TLiteral<"sandboxAttested">]>;
     allowedExecutors: TArray<TObject<    {
         provider: TString;
         model: TString;
     }>>;
-    status: TUnion<[TLiteral<"queued">, TLiteral<"dispatched">, TLiteral<"running">, TLiteral<"completed">, TLiteral<"failed">, TLiteral<"cancelled">, TLiteral<"expired">]>;
+    status: TUnion<[TLiteral<"waiting">, TLiteral<"queued">, TLiteral<"dispatched">, TLiteral<"running">, TLiteral<"completed">, TLiteral<"failed">, TLiteral<"cancelled">, TLiteral<"expired">]>;
     queuedAt: TString;
     completedAt: TUnion<[TString, TNull]>;
     expiresAt: TUnion<[TString, TNull]>;
@@ -813,7 +830,7 @@ declare interface TaskReporter {
     /** Flush buffers + release resources. Called once. Idempotent. */
     close(): Promise<void>;
     /**
-     * Signal that aborts when the task is cancelled by the imposer (or a
+     * Signal that aborts when the task is cancelled by the proposer (or a
      * diary writer) while the executor is running. `ApiTaskReporter`
      * aborts this on the next heartbeat that observes `cancelled: true`
      * in the response (#938). Local reporters (`StdoutReporter`,

package/dist/index.js

@@ -1130,84 +1130,6 @@ var searchDiary = (options) => (options?.client ?? client).post({
 	}
 });
 /**
-* Get a digest of recent diary entries.
-*/
-var reflectDiary = (options) => (options.client ?? client).get({
-	security: [
-		{
-			scheme: "bearer",
-			type: "http"
-		},
-		{
-			name: "X-Moltnet-Session-Token",
-			type: "apiKey"
-		},
-		{
-			in: "cookie",
-			name: "ory_kratos_session",
-			type: "apiKey"
-		}
-	],
-	url: "/diaries/reflect",
-	...options
-});
-/**
-* [DEPRECATED] Server-side consolidation is obsolete. Compose consolidation suggestions client-side using diary search + clustering. Cluster semantically similar entries and return consolidation suggestions.
-*
-* @deprecated
-*/
-var consolidateDiary = (options) => (options.client ?? client).post({
-	security: [
-		{
-			scheme: "bearer",
-			type: "http"
-		},
-		{
-			name: "X-Moltnet-Session-Token",
-			type: "apiKey"
-		},
-		{
-			in: "cookie",
-			name: "ory_kratos_session",
-			type: "apiKey"
-		}
-	],
-	url: "/diaries/{id}/consolidate",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
-* [DEPRECATED] Server-side compilation is obsolete. Use POST /diaries/:id/packs to create custom packs from agent-side entry selection. Compile a token-budget-fitted context pack from diary entries.
-*
-* @deprecated
-*/
-var compileDiary = (options) => (options.client ?? client).post({
-	security: [
-		{
-			scheme: "bearer",
-			type: "http"
-		},
-		{
-			name: "X-Moltnet-Session-Token",
-			type: "apiKey"
-		},
-		{
-			in: "cookie",
-			name: "ory_kratos_session",
-			type: "apiKey"
-		}
-	],
-	url: "/diaries/{id}/compile",
-	...options,
-	headers: {
-		"Content-Type": "application/json",
-		...options.headers
-	}
-});
-/**
 * Export the provenance graph for a persisted context pack by ID.
 */
 var getContextPackProvenanceById = (options) => (options.client ?? client).get({
@@ -2507,7 +2429,7 @@ var MoltNetError = class extends Error {
 	/**
 	* Populated when the server returned a `VALIDATION_FAILED` problem
 	* (status 400) with field-level errors. Empty / undefined for every
-	* other problem kind. Imposer scripts surface these to operators so
+	* other problem kind. Proposer scripts surface these to operators so
 	* they don't have to re-run with curl to see what was rejected.
 	*/
 	validationErrors;
@@ -2683,22 +2605,6 @@ function createDiariesNamespace(context) {
 				path: { id }
 			}));
 		},
-		async consolidate(id, body) {
-			return unwrapResult(await consolidateDiary({
-				client,
-				auth,
-				path: { id },
-				body
-			}));
-		},
-		async compile(id, body) {
-			return unwrapResult(await compileDiary({
-				client,
-				auth,
-				path: { id },
-				body
-			}));
-		},
 		async tags(diaryId, query) {
 			return unwrapResult(await listDiaryTags({
 				client,
@@ -4546,13 +4452,6 @@ function createEntriesNamespace(context) {
 				body
 			}));
 		},
-		async reflect(query) {
-			return unwrapResult(await reflectDiary({
-				client,
-				auth,
-				query
-			}));
-		},
 		async verify(entryId) {
 			return unwrapResult(await verifyDiaryEntryById({
 				client,
@@ -8032,7 +7931,7 @@ function createMoltNetTools(config) {
 		defineTool({
 			name: "moltnet_host_exec",
 			label: "Run command on host (escape hatch — requires user approval)",
-			description: "Runs a command on the HOST machine, outside the sandbox VM. The user will be prompted to approve each invocation via a UI dialog — do NOT call this tool speculatively. Use ONLY when a sandboxed operation is impossible — e.g. `git push`, `gh pr create`.\n\nAllowed executables: git, gh, moltnet. Runs with a minimal env (PATH, HOME, GIT_CONFIG_GLOBAL, …); pass any additional vars via the `env` parameter (e.g. GH_TOKEN). Every invocation is logged as an auditable host execution.",
+			description: "Runs a command on the HOST machine, outside the sandbox VM. The user will be prompted to approve each invocation via a UI dialog, and in headless task runs there is no one to approve — so do NOT call this tool speculatively. Routine git and gh work — pushing branches, opening pull requests, etc. — runs INSIDE the VM via the normal `bash` tool, where your credentials are already injected; use that, not this escape hatch. Reserve this tool for the rare case that genuinely cannot run in the guest (e.g. reaching a host-only resource the VM has no path to).\n\nAllowed executables: git, gh, moltnet. Runs with a minimal env (PATH, HOME, GIT_CONFIG_GLOBAL, …); pass any additional vars via the `env` parameter (e.g. GH_TOKEN). Every invocation is logged as an auditable host execution.",
 			parameters: Type.Object({
 				executable: Type.String({ description: "Executable to run (git | gh | moltnet)" }),
 				args: Type.Array(Type.String(), { description: "Arguments to pass to the executable" }),
@@ -8942,7 +8841,7 @@ var PROMPT_SEPARATOR = "\n\n---\n\n";
 *                       declared order, same separator.
 *
 * No fetching, no hashing — bytes are inlined in `ContextRef.content`,
-* and the task's `inputCid` already pins the entire input. The imposer
+* and the task's `inputCid` already pins the entire input. The proposer
 * chose these bytes; the resolver just dispatches them.
 *
 * The function is pure with respect to its arguments: file writes are
@@ -9029,7 +8928,7 @@ var ContextBinding = Type$1.Union([
 	Type$1.Literal("user_inline")
 ], { $id: "ContextBinding" });
 /**
-* One context entry. Bytes are inlined: the imposer chose them, and the
+* One context entry. Bytes are inlined: the proposer chose them, and the
 * task's `inputCid` already pins the entire input — including
 * `context[]` — so we don't need a separate per-entry hash, fetcher, or
 * flagged-content gate. Tasks reference rendered packs (or any other
@@ -9175,7 +9074,7 @@ function validateRubricWeights(rubric) {
 //#endregion
 //#region ../tasks/src/success-criteria.ts
 /**
-* SuccessCriteria — imposer-stated acceptance criteria, evaluated in two
+* SuccessCriteria — proposer-stated acceptance criteria, evaluated in two
 * complementary places.
 *
 * Before this envelope existed, criteria were scattered: a vestigial
@@ -9184,7 +9083,7 @@ function validateRubricWeights(rubric) {
 * judgment-task inputs. None of those were machine-verifiable
 * end-to-end.
 *
-* This module defines a single, content-addressable envelope an imposer
+* This module defines a single, content-addressable envelope a proposer
 * attaches to any task type. It has four orthogonal sections — pick
 * whichever apply per task type:
 *
@@ -9218,7 +9117,7 @@ function validateRubricWeights(rubric) {
 * spec for the judge.
 *
 * The clean chain: producer task with `successCriteria` → producer
-* self-assesses honestly → imposer (or automation) creates a downstream
+* self-assesses honestly → proposer (or automation) creates a downstream
 * judgment task that references the same `successCriteria` (or a
 * stricter rubric) → judgment task delivers the binding verdict.
 *
@@ -9380,8 +9279,9 @@ var AssessBriefOutput = Type$1.Object({
 *   - `targetTaskId` resolves to a real task the caller can see.
 *   - The target is a `fulfill_brief` (you cannot grade an arbitrary
 *     task type as if it were a brief fulfillment).
-*   - The target is `completed` with an accepted attempt — grading
-*     an in-flight or failed task would either race or grade nothing.
+*   - Unless readiness checks are explicitly deferred, the target is
+*     `completed` with an accepted attempt — grading an in-flight or
+*     failed task would either race or grade nothing.
 *
 * Agent-distinctness ("assessor ≠ producer") is a runtime / auth-
 * layer concern and intentionally NOT checked here. It belongs in
@@ -9402,7 +9302,7 @@ async function validateAssessBriefInputAsync(input, ctx) {
 		field: "targetTaskId",
 		message: `targetTaskId ${targetTaskId} is a ${target.taskType}, not a fulfill_brief`
 	});
-	if (target.status !== "completed" || target.acceptedAttemptN === null) errors.push({
+	if (!ctx.deferReadinessChecks && (target.status !== "completed" || target.acceptedAttemptN === null)) errors.push({
 		field: "targetTaskId",
 		message: `targetTaskId ${targetTaskId} is not completed with an accepted attempt (status=${target.status}, acceptedAttemptN=${target.acceptedAttemptN})`
 	});
@@ -9476,6 +9376,59 @@ var CuratePackOutput = Type$1.Object({
 	additionalProperties: false
 });
 //#endregion
+//#region ../tasks/src/task-types/freeform.ts
+var FREEFORM_TYPE = "freeform";
+var FreeformTaskTypeProposal = Type$1.Object({
+	name: Type$1.String({ minLength: 1 }),
+	rationale: Type$1.String({ minLength: 1 }),
+	inputShape: Type$1.Optional(Type$1.Record(Type$1.String(), Type$1.Unknown())),
+	outputShape: Type$1.Optional(Type$1.Record(Type$1.String(), Type$1.Unknown()))
+}, {
+	$id: "FreeformTaskTypeProposal",
+	additionalProperties: false
+});
+var FreeformInput = Type$1.Object({
+	title: Type$1.Optional(Type$1.String({ minLength: 1 })),
+	brief: Type$1.String({ minLength: 1 }),
+	expectedOutput: Type$1.Optional(Type$1.String({ minLength: 1 })),
+	constraints: Type$1.Optional(Type$1.Array(Type$1.String({ minLength: 1 }), { maxItems: 20 })),
+	suggestedTaskType: Type$1.Optional(Type$1.String({ minLength: 1 })),
+	successCriteria: Type$1.Optional(SuccessCriteria),
+	context: Type$1.Optional(TaskContext)
+}, {
+	$id: "FreeformInput",
+	additionalProperties: false
+});
+var FreeformArtifact = Type$1.Object({
+	kind: Type$1.String({ minLength: 1 }),
+	title: Type$1.String({ minLength: 1 }),
+	description: Type$1.Optional(Type$1.String({ minLength: 1 })),
+	url: Type$1.Optional(Type$1.String({ minLength: 1 })),
+	path: Type$1.Optional(Type$1.String({ minLength: 1 }))
+}, {
+	$id: "FreeformArtifact",
+	additionalProperties: false
+});
+var FreeformFollowUpTask = Type$1.Object({
+	title: Type$1.String({ minLength: 1 }),
+	brief: Type$1.String({ minLength: 1 }),
+	suggestedTaskType: Type$1.Optional(Type$1.String({ minLength: 1 }))
+}, {
+	$id: "FreeformFollowUpTask",
+	additionalProperties: false
+});
+var FreeformOutput = Type$1.Object({
+	summary: Type$1.String({ minLength: 1 }),
+	artifacts: Type$1.Optional(Type$1.Array(FreeformArtifact, { maxItems: 20 })),
+	proposedTaskType: Type$1.Optional(FreeformTaskTypeProposal),
+	followUpTasks: Type$1.Optional(Type$1.Array(FreeformFollowUpTask, { maxItems: 20 })),
+	diaryEntryIds: Type$1.Optional(Type$1.Array(Type$1.String({ format: "uuid" }))),
+	verification: Type$1.Optional(VerificationRecord)
+}, {
+	$id: "FreeformOutput",
+	additionalProperties: false
+});
+//#endregion
 //#region ../tasks/src/task-types/fulfill-brief.ts
 /**
 * `fulfill_brief` — produce a signed change against a coding brief.
@@ -9723,11 +9676,11 @@ async function validateJudgeEvalAttemptInputAsync(input, ctx) {
 		field: "targetTaskId",
 		message: `targetTaskId=${inp.targetTaskId} is a ${target.taskType}, not a run_eval`
 	});
-	if (target.status !== "completed" || target.acceptedAttemptN === null) errors.push({
+	if (!ctx.deferReadinessChecks && (target.status !== "completed" || target.acceptedAttemptN === null)) errors.push({
 		field: "targetTaskId",
 		message: `targetTaskId=${inp.targetTaskId} is not completed with an accepted attempt (status=${target.status}, acceptedAttemptN=${target.acceptedAttemptN})`
 	});
-	else if (target.acceptedAttemptN !== inp.targetAttemptN) errors.push({
+	else if (target.acceptedAttemptN !== null && target.acceptedAttemptN !== inp.targetAttemptN) errors.push({
 		field: "targetAttemptN",
 		message: `targetAttemptN=${inp.targetAttemptN} does not match the producer's acceptedAttemptN=${target.acceptedAttemptN}`
 	});
@@ -9738,6 +9691,7 @@ async function validateJudgeEvalAttemptInputAsync(input, ctx) {
 	if (errors.length > 0 || !target.correlationId) return errors;
 	const rubric = inp.successCriteria.rubric;
 	const duplicate = (await ctx.listTasksByCorrelation(target.correlationId)).find((task) => {
+		if (task.id === ctx.currentTaskId) return false;
 		if (task.taskType !== "judge_eval_attempt") return false;
 		if (task.status === "failed" || task.status === "cancelled" || task.status === "expired") return false;
 		const existing = task.input;
@@ -10033,6 +9987,16 @@ function requireVerificationWhenCriteriaPresent(output, input) {
 * / claiming a task.
 */
 var BUILT_IN_TASK_TYPES = {
+	[FREEFORM_TYPE]: {
+		name: FREEFORM_TYPE,
+		inputSchema: FreeformInput,
+		outputSchema: FreeformOutput,
+		outputKind: "artifact",
+		workspaceScope: "attempt",
+		sessionScope: "none",
+		requiresReferences: false,
+		validateOutput: requireVerificationWhenCriteriaPresent
+	},
 	[FULFILL_BRIEF_TYPE]: {
 		name: FULFILL_BRIEF_TYPE,
 		inputSchema: FulfillBriefInput,
@@ -10205,11 +10169,12 @@ function taskTypeUsesSubagents(taskType) {
 *
 * Identity rule:
 *   - claim/execute/sign → agent-only (`task_attempts.claimed_by_agent_id`)
-*   - impose/cancel → agent XOR human (dual nullable FK + XOR check)
+*   - propose/cancel → agent XOR human (dual nullable FK + XOR check)
 *
 * See GH issue #852 for the full design snapshot.
 */
 var TaskStatus = Type$1.Union([
+	Type$1.Literal("waiting"),
 	Type$1.Literal("queued"),
 	Type$1.Literal("dispatched"),
 	Type$1.Literal("running"),
@@ -10252,6 +10217,36 @@ var TaskMessageKind = Type$1.Union([
 var Uuid = Type$1.String({ format: "uuid" });
 var Cid = Type$1.String({ minLength: 1 });
 var IsoTimestamp = Type$1.String({ format: "date-time" });
+var MAX_CLAIM_CONDITION_BRANCHES = 8;
+var MAX_CLAIM_CONDITION_STATUSES = 8;
+var ClaimCondition = Type$1.Recursive((Self) => Type$1.Union([
+	Type$1.Object({
+		op: Type$1.Literal("all"),
+		conditions: Type$1.Array(Self, {
+			minItems: 1,
+			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+		})
+	}, { additionalProperties: false }),
+	Type$1.Object({
+		op: Type$1.Literal("any"),
+		conditions: Type$1.Array(Self, {
+			minItems: 1,
+			maxItems: MAX_CLAIM_CONDITION_BRANCHES
+		})
+	}, { additionalProperties: false }),
+	Type$1.Object({
+		op: Type$1.Literal("task_status"),
+		taskId: Uuid,
+		statuses: Type$1.Array(Type$1.Ref(TaskStatus), {
+			minItems: 1,
+			maxItems: MAX_CLAIM_CONDITION_STATUSES
+		})
+	}, { additionalProperties: false }),
+	Type$1.Object({
+		op: Type$1.Literal("task_accepted"),
+		taskId: Uuid
+	}, { additionalProperties: false })
+]), { $id: "ClaimCondition" });
 /**
 * Reference to another task's output or an external artifact.
 * Embedded in `tasks.references` JSONB array.
@@ -10328,9 +10323,10 @@ Type$1.Object({
 	inputCid: Cid,
 	references: Type$1.Array(TaskRef),
 	correlationId: Type$1.Union([Uuid, Type$1.Null()]),
-	imposedByAgentId: Type$1.Union([Uuid, Type$1.Null()]),
-	imposedByHumanId: Type$1.Union([Uuid, Type$1.Null()]),
+	proposedByAgentId: Type$1.Union([Uuid, Type$1.Null()]),
+	proposedByHumanId: Type$1.Union([Uuid, Type$1.Null()]),
 	acceptedAttemptN: Type$1.Union([Type$1.Number(), Type$1.Null()]),
+	claimCondition: Type$1.Union([ClaimCondition, Type$1.Null()]),
 	requiredExecutorTrustLevel: ExecutorTrustLevel,
 	allowedExecutors: Type$1.Array(ExecutorRef, { maxItems: 16 }),
 	status: TaskStatus,
@@ -10787,7 +10783,7 @@ function buildCuratePackUserPrompt(input, ctx) {
 		"to defend it in the summary."
 	].join("\n");
 	const constraintsLines = [];
-	if (entryTypesPinned) constraintsLines.push(`- Entry types pinned by imposer (do not widen): ${entryTypes.map((t) => `\`${t}\``).join(", ")}`);
+	if (entryTypesPinned) constraintsLines.push(`- Entry types pinned by proposer (do not widen): ${entryTypes.map((t) => `\`${t}\``).join(", ")}`);
 	else constraintsLines.push("- Entry types: **you choose**. The diary contains three kinds:", "  - `episodic` — incident reports, \"what happened and how we fixed it\" narratives.", "  - `semantic` — durable decisions, patterns, design rationale.", "  - `procedural` — commit audit trails / changelog-style provenance.", "  Pick the subset that fits the prompt. For \"failures and workarounds\"", "  or \"decisions we made\" you generally do NOT want `procedural` — those", "  entries are append-only commit logs and produce changelog-shaped packs.", "  Include `procedural` only when the prompt explicitly asks for changelog-", "  style content (e.g., \"what shipped this week\"). State your choice", "  briefly in the final `summary`.");
 	constraintsLines.push(`- Recipe tag: \`${resolvedRecipe}\` (recorded on pack params)`);
 	constraintsLines.push(tokenBudget ? `- Token budget (soft cap on final pack): ${tokenBudget}. Pick entry count so the pack fits — estimate ~300 tok/entry as a starting heuristic, tighten after inspecting actual content lengths.` : "- No token budget — size the pack to match the prompt, not an arbitrary target.");
@@ -10933,6 +10929,97 @@ function buildCuratePackUserPrompt(input, ctx) {
 	]);
 }
 //#endregion
+//#region ../agent-runtime/src/prompts/freeform.ts
+function buildFreeformUserPrompt(input, ctx) {
+	const header = [
+		"# Freeform Task Agent",
+		"",
+		"You are handling an exploratory MoltNet task that does not yet have a",
+		"more specific execution contract. Treat the brief as the source of truth,",
+		"use judgment, and keep the result useful enough for a human or another",
+		"agent to continue from it.",
+		"",
+		`Task id: \`${ctx.taskId}\``
+	].join("\n");
+	const expectedOutput = input.expectedOutput ?? "";
+	const constraints = input.constraints?.length ? input.constraints.map((constraint) => `- ${constraint}`).join("\n") : "";
+	const suggestedTaskType = input.suggestedTaskType ? [`The proposer suggested task type \`${input.suggestedTaskType}\`.`, "Use it as a hint, not as a contract."].join("\n") : "";
+	const workflow = [
+		"1. Clarify the real objective from the brief before acting.",
+		"2. Gather enough context to avoid guessing.",
+		"3. Complete the requested work when it is safe and bounded.",
+		"4. If the request reveals a recurring task shape, include a",
+		"   `proposedTaskType` in the final output with a concise rationale.",
+		"5. If the work should be split or continued, include `followUpTasks`."
+	].join("\n");
+	return assembleTaskPrompt("freeform", [
+		{
+			id: "freeform.header",
+			source: "header",
+			body: header
+		},
+		{
+			id: "freeform.title",
+			source: "task_input",
+			header: "Title",
+			body: input.title ?? ""
+		},
+		{
+			id: "freeform.brief",
+			source: "task_input",
+			header: "Brief",
+			body: input.brief
+		},
+		{
+			id: "freeform.expected_output",
+			source: "task_input",
+			header: "Expected Output",
+			body: expectedOutput
+		},
+		{
+			id: "freeform.constraints",
+			source: "task_input",
+			header: "Constraints",
+			body: constraints
+		},
+		{
+			id: "freeform.suggested_task_type",
+			source: "task_input",
+			header: "Suggested Task Type",
+			body: suggestedTaskType
+		},
+		{
+			id: "freeform.workflow",
+			source: "static",
+			header: "Workflow",
+			body: workflow
+		},
+		{
+			id: "freeform.verification",
+			source: "verification",
+			body: buildSelfVerificationBlock(ctx.taskId)
+		},
+		{
+			id: "freeform.final_output",
+			source: "final_output",
+			body: buildFinalOutputBlock({
+				taskType: "freeform",
+				outputSchemaName: "FreeformOutput",
+				shapeSketch: [
+					"{",
+					"  \"summary\": \"<2-5 sentence result>\",",
+					"  \"artifacts\": [{ \"kind\": \"...\", \"title\": \"...\", \"description\": \"...\", \"url\": \"...\", \"path\": \"...\" }],",
+					"  \"proposedTaskType\": { \"name\": \"...\", \"rationale\": \"...\", \"inputShape\": {}, \"outputShape\": {} },",
+					"  \"followUpTasks\": [{ \"title\": \"...\", \"brief\": \"...\", \"suggestedTaskType\": \"...\" }],",
+					"  \"diaryEntryIds\": [\"...\"],",
+					"  \"verification\": <required iff input.successCriteria; see Self-verification>",
+					"}"
+				].join("\n")
+			})
+		}
+	]);
+}
+//#endregion
 //#region ../agent-runtime/src/prompts/fulfill-brief.ts
 /**
 * Build the first user-message prompt for a `fulfill_brief` task.
@@ -10982,7 +11069,11 @@ function buildFulfillBriefUserPrompt(input, ctx) {
 		"5. For every commit, create a signed diary entry first via",
 		"   `moltnet_create_entry` and embed its id in the commit trailer",
 		"   `MoltNet-Diary: <id>` (per the runtime instructor).",
-		"6. Push the branch and open a PR."
+		"6. Push the branch and open a PR — run `git push` and `gh pr create`",
+		"   IN the VM with your normal `bash` tool (use the",
+		"   `GH_TOKEN=$(moltnet github token …) gh …` form from the runtime",
+		"   instructor). Do NOT use `moltnet_host_exec` for this; it needs human",
+		"   approval that is unavailable in a headless run."
 	].join("\n");
 	return assembleTaskPrompt("fulfill_brief", [
 		{
@@ -11682,6 +11773,12 @@ function buildRunEvalUserPrompt(input, ctx) {
 */
 function buildTaskUserPrompt(task, ctx) {
 	switch (task.taskType) {
+		case FREEFORM_TYPE:
+			if (!Value.Check(FreeformInput, task.input)) {
+				const errors = [...Value.Errors(FreeformInput, task.input)];
+				throw new Error(`freeform input failed validation: ${JSON.stringify(errors.slice(0, 3))}`);
+			}
+			return buildFreeformUserPrompt(task.input, { taskId: ctx.taskId });
 		case FULFILL_BRIEF_TYPE:
 			if (!Value.Check(FulfillBriefInput, task.input)) {
 				const errors = [...Value.Errors(FulfillBriefInput, task.input)];
@@ -15419,6 +15516,11 @@ function buildRuntimeInstructor(ctx) {
 		"",
 		"- `git push` uses the gitconfig-configured credential helper and is not",
 		"  a `gh` call — it does not need `GH_TOKEN`.",
+		"- Run `git` and `gh` in the VM with your normal `bash` tool — your",
+		"  credentials are injected here, so they work in the guest. The",
+		"  `moltnet_host_exec` tool is a last-resort host escape-hatch that",
+		"  requires human approval and is unavailable in headless task runs;",
+		"  never use it for routine git/gh.",
 		"",
 		"## Diary discipline",
 		"",
@@ -16594,7 +16696,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 			durationMs: Date.now() - startTime,
 			error: {
 				code: "task_cancelled",
-				message: reporter.cancelReason ?? "Task cancelled by imposer while pi session was running.",
+				message: reporter.cancelReason ?? "Task cancelled by proposer while pi session was running.",
 				retryable: false
 			}
 		};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/pi-extension",
-  "version": "0.19.6",
+  "version": "0.20.1",
   "type": "module",
   "description": "MoltNet pi extension — sandboxed tool execution in Gondolin VMs with MoltNet identity and persistent memory",
   "license": "MIT",
@@ -31,8 +31,8 @@
     "@earendil-works/gondolin": "^0.9.1",
     "@opentelemetry/api": "^1.9.0",
     "@sinclair/typebox": "^0.34.0",
-    "@themoltnet/agent-runtime": "0.18.5",
-    "@themoltnet/sdk": "0.105.1"
+    "@themoltnet/agent-runtime": "0.19.1",
+    "@themoltnet/sdk": "0.106.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": ">=0.74.0",