@themoltnet/pi-extension 0.26.2 → 0.26.4

package/dist/index.d.ts

@@ -244,6 +244,13 @@ export declare function executePiTask(claimedTask: ClaimedTask, reporter: TaskRe
 export declare interface ExecutePiTaskOptions {
     /** MoltNet agent whose credentials the VM boots with. */
     agentName: string;
+    /**
+     * Host root that owns `.moltnet/<agentName>/`.
+     *
+     * Defaults to `mountPath`, but callers that mount scratch workspaces should
+     * pass the stable sandbox root.
+     */
+    agentRootDir?: string;
     /** Host cwd that the VM mounts into the guest (defaults to `process.cwd()`). */
     mountPath?: string;
     /** LLM selection. */
@@ -907,6 +914,13 @@ export declare interface VmConfig {
     checkpointPath: string;
     /** MoltNet agent name (used to resolve credentials). */
     agentName: string;
+    /**
+     * Host root that owns `.moltnet/<agentName>/`.
+     *
+     * Defaults to the main git worktree for backwards compatibility. Daemon
+     * callers pass the sandbox root so non-git scratch/shared tasks can boot.
+     */
+    agentRootDir?: string;
     /** Host directory to mount into the VM. */
     mountPath: string;
     /** Effective workspace shape selected by the caller. */

package/dist/index.js

@@ -1257,6 +1257,32 @@ var initiateTransfer = (options) => (options.client ?? client).post({
 	}
 });
 /**
+* Delete multiple diary entries. Signed, unauthorized, and missing entries are skipped.
+*/
+var batchDeleteDiaryEntries = (options) => (options.client ?? client).delete({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/entries",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
 * Delete a diary entry.
 */
 var deleteDiaryEntryById = (options) => (options.client ?? client).delete({
@@ -1866,6 +1892,32 @@ var findLatestRuntimeSlotForAttempt = (options) => (options.client ?? client).ge
 	...options
 });
 /**
+* Delete terminal tasks in bulk. Safe mode skips live, unauthorized, missing, and protected tasks.
+*/
+var batchDeleteTasks = (options) => (options.client ?? client).delete({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/tasks",
+	...options,
+	headers: {
+		"Content-Type": "application/json",
+		...options.headers
+	}
+});
+/**
 * List tasks for a team with optional filters.
 */
 var listTasks = (options) => (options.client ?? client).get({
@@ -4661,6 +4713,13 @@ function createEntriesNamespace(context) {
 				path: { entryId }
 			}));
 		},
+		async deleteMany(body) {
+			return unwrapResult(await batchDeleteDiaryEntries({
+				client,
+				auth,
+				body
+			}));
+		},
 		async search(body) {
 			return unwrapResult(await searchDiary({
 				client,
@@ -5140,6 +5199,13 @@ function createTasksNamespace(context) {
 				body
 			}));
 		},
+		async deleteMany(body) {
+			return unwrapResult(await batchDeleteTasks({
+				client,
+				auth,
+				body
+			}));
+		},
 		async listAttempts(id) {
 			return unwrapResult(await listTaskAttempts({
 				client,
@@ -8716,11 +8782,20 @@ function shouldRunResumeCommand(entry, ctx) {
 * only exists in the main worktree, not in git worktrees).
 */
 function findMainWorktree() {
-	const output = execFileSync("git", [
-		"worktree",
-		"list",
-		"--porcelain"
-	], { encoding: "utf8" });
+	let output;
+	try {
+		output = execFileSync("git", [
+			"worktree",
+			"list",
+			"--porcelain"
+		], {
+			encoding: "utf8",
+			stdio: "pipe"
+		});
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		throw new Error(`Git worktree discovery requires a git repository: ${message}`);
+	}
 	for (const block of output.split("\n\n")) {
 		const lines = block.split("\n");
 		const wt = lines.find((l) => l.startsWith("worktree "));
@@ -8728,6 +8803,10 @@ function findMainWorktree() {
 	}
 	throw new Error("Could not find main git worktree");
 }
+function resolveVmAgentDir(config) {
+	const rootDir = config.agentRootDir ?? findMainWorktree();
+	return path.join(rootDir, ".moltnet", config.agentName);
+}
 function loadCredentials(agentDir) {
 	const moltnetJson = readFileSync(path.join(agentDir, "moltnet.json"), "utf8");
 	const agentEnvRaw = readFileSync(path.join(agentDir, "env"), "utf8");
@@ -8826,8 +8905,7 @@ function nonErrorMessage(err) {
 */
 async function resumeVm(config) {
 	throwIfAborted(config.signal, "VM resume");
-	const mainRepo = findMainWorktree();
-	const agentDir = path.join(mainRepo, ".moltnet", config.agentName);
+	const agentDir = resolveVmAgentDir(config);
 	const guestWorkspace = path.resolve(config.mountPath);
 	if (!existsSync(agentDir)) throw new Error(`Agent directory not found: ${agentDir}. Run: moltnet register --name ${config.agentName}`);
 	const creds = loadCredentials(agentDir);
@@ -23442,7 +23520,7 @@ function prepareTaskWorkspace(task, requestedMountPath, executionPlan) {
 		cleanup: () => {}
 	};
 	if (workspaceMode === "scratch_mount") {
-		const scratchDir = resolveTaskScratchPath(findMainWorktree(), executionPlan?.workspaceId ?? `task-${task.id}`);
+		const scratchDir = resolveTaskScratchPath(requestedMountPath, executionPlan?.workspaceId ?? `task-${task.id}`);
 		const keepWorkspace = executionPlan?.workspaceScope === "session" && executionPlan.sessionKey !== null;
 		if (keepWorkspace) mkdirSync(scratchDir, { recursive: true });
 		else {
@@ -23474,7 +23552,7 @@ function prepareTaskWorkspace(task, requestedMountPath, executionPlan) {
 		branch: null,
 		cleanup: () => {}
 	};
-	const mainRepo = findMainWorktree();
+	const mainRepo = findMainWorktreeForDedicatedTask();
 	const worktreeDir = resolveTaskWorktreePath(mainRepo, executionPlan?.workspaceId ?? `task-${task.id}`);
 	const relMount = relative(mainRepo, requestedMountPath);
 	const cwdPath = relMount === "" || relMount.startsWith("..") ? worktreeDir : join(worktreeDir, relMount);
@@ -23505,8 +23583,8 @@ function prepareTaskWorkspace(task, requestedMountPath, executionPlan) {
 function resolveTaskWorktreePath(mainRepo, workspaceId) {
 	return join(mainRepo, ".worktrees", workspaceId);
 }
-function resolveTaskScratchPath(mainRepo, workspaceId) {
-	return join(mainRepo, ".moltnet", "d", "task-workspaces", workspaceId);
+function resolveTaskScratchPath(stateRoot, workspaceId) {
+	return join(stateRoot, ".moltnet", "d", "task-workspaces", workspaceId);
 }
 function ensureReusableTaskWorktree(mainRepo, worktreeDir, branch, baseRefOverride = null) {
 	if (isRegisteredWorktree(mainRepo, worktreeDir)) return;
@@ -23577,6 +23655,14 @@ function gitRefExists(mainRepo, ref) {
 		return false;
 	}
 }
+function findMainWorktreeForDedicatedTask() {
+	try {
+		return findMainWorktree();
+	} catch (err) {
+		const message = err instanceof Error ? err.message : String(err);
+		throw new Error(`Dedicated worktree tasks require a git repository: ${message}`);
+	}
+}
 function copyDirectoryContents(sourceDir, targetDir) {
 	if (!existsSync(sourceDir)) throw new Error(`Workspace seed source is missing: ${sourceDir}`);
 	if (existsSync(join(sourceDir, ".git"))) initializeScratchGitRepo(sourceDir, targetDir);
@@ -23698,6 +23784,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 	const attemptN = claimedTask.attemptN;
 	const startTime = Date.now();
 	const requestedMountPath = opts.mountPath ?? process.cwd();
+	const agentRootDir = opts.agentRootDir ?? requestedMountPath;
 	const executionPlan = await opts.makeExecutionPlan?.(claimedTask) ?? null;
 	let workspace = null;
 	let mountPath = requestedMountPath;
@@ -23809,6 +23896,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 			managed = await resumeVm({
 				checkpointPath,
 				agentName: opts.agentName,
+				agentRootDir,
 				mountPath,
 				workspaceMode: workspace.mode,
 				extraAllowedHosts: opts.extraAllowedHosts,
@@ -23826,8 +23914,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 		}
 		const diaryId = task.diaryId ?? "";
 		const taskTeamId = task.teamId ?? "";
-		const mainRepo = findMainWorktree();
-		activateAgentEnv(managed.credentials.agentEnv, mainRepo);
+		activateAgentEnv(managed.credentials.agentEnv, agentRootDir);
 		const activeWorkspace = workspace;
 		if (!activeWorkspace) throw new Error("task workspace not prepared");
 		await emit("info", {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/pi-extension",
-  "version": "0.26.2",
+  "version": "0.26.4",
   "type": "module",
   "description": "MoltNet pi extension — sandboxed tool execution in Gondolin VMs with MoltNet identity and persistent memory",
   "keywords": [
@@ -36,8 +36,8 @@
     "@earendil-works/gondolin": "^0.9.1",
     "@opentelemetry/api": "^1.9.0",
     "typebox": "^1.2.8",
-    "@themoltnet/sdk": "0.109.0",
-    "@themoltnet/agent-runtime": "0.28.0"
+    "@themoltnet/sdk": "0.110.0",
+    "@themoltnet/agent-runtime": "0.28.1"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": ">=0.74.0",
@@ -61,8 +61,8 @@
     "vite": "^8.0.0",
     "vite-plugin-dts": "^4.5.4",
     "vitest": "^3.0.0",
-    "@moltnet/tasks": "0.1.0",
-    "@moltnet/crypto-service": "0.1.0"
+    "@moltnet/crypto-service": "0.1.0",
+    "@moltnet/tasks": "0.1.0"
   },
   "engines": {
     "node": ">=22"