@themoltnet/pi-extension 0.26.5 → 0.27.1

package/dist/index.js

@@ -4,6 +4,7 @@ import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync,
 import path, { join, relative, sep } from "node:path";
 import { DefaultResourceLoader, SessionManager, createAgentSession, createBashTool, createBashToolDefinition, createEditTool, createEditToolDefinition, createReadTool, createReadToolDefinition, createSyntheticSourceInfo, createWriteTool, createWriteToolDefinition, defineTool, parseFrontmatter } from "@earendil-works/pi-coding-agent";
 import { createHash } from "node:crypto";
+import { Readable } from "node:stream";
 import crypto, { createHash as createHash$1 } from "crypto";
 import { readFile } from "node:fs/promises";
 import { homedir } from "node:os";
@@ -1818,6 +1819,55 @@ var updateRuntimeProfile = (options) => (options.client ?? client).patch({
 	}
 });
 /**
+* Get metadata for the durable team-scoped runtime session for a task attempt.
+*/
+var getRuntimeSession = (options) => (options.client ?? client).get({
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-sessions/{taskId}/{attemptN}",
+	...options
+});
+/**
+* Stream or replace the durable team-scoped runtime session content for a task attempt.
+*/
+var uploadRuntimeSession = (options) => (options.client ?? client).put({
+	bodySerializer: null,
+	security: [
+		{
+			scheme: "bearer",
+			type: "http"
+		},
+		{
+			name: "X-Moltnet-Session-Token",
+			type: "apiKey"
+		},
+		{
+			in: "cookie",
+			name: "ory_kratos_session",
+			type: "apiKey"
+		}
+	],
+	url: "/runtime-sessions/{taskId}/{attemptN}/content",
+	...options,
+	headers: {
+		"Content-Type": "application/octet-stream",
+		...options.headers
+	}
+});
+/**
 * Upsert a team-scoped runtime slot for audit and continuation affinity lookup.
 */
 var beginRuntimeSlot = (options) => (options.client ?? client).post({
@@ -2831,46 +2881,66 @@ function createCryptoNamespace(context, signingRequests) {
 	};
 }
 //#endregion
+//#region ../sdk/src/namespaces/team-headers.ts
+/**
+* Build the team header from an optional option, or `undefined` when no team
+* context was supplied. Used by diaries and runtime-profiles, whose endpoints
+* accept the header optionally.
+*/
+function teamHeaders(options) {
+	return options?.teamId ? { "x-moltnet-team-id": options.teamId } : void 0;
+}
+/**
+* Build the team header from a required option. Used by tasks and
+* runtime-slots, whose endpoints mandate the header.
+*/
+function requiredTeamHeaders(options) {
+	return { "x-moltnet-team-id": options.teamId };
+}
+//#endregion
 //#region ../sdk/src/namespaces/diaries.ts
 function createDiariesNamespace(context) {
 	const { client, auth } = context;
 	return {
-		async list(query, headers) {
+		async list(query, options) {
 			return unwrapResult(await listDiaries({
 				client,
 				auth,
 				query,
-				headers
+				headers: teamHeaders(options)
 			}));
 		},
-		async create(body, headers) {
+		async create(body, options) {
 			return unwrapResult(await createDiary({
 				client,
 				auth,
 				body,
-				headers
+				headers: requiredTeamHeaders(options)
 			}));
 		},
-		async get(id) {
+		async get(id, options) {
 			return unwrapResult(await getDiary({
 				client,
 				auth,
-				path: { id }
+				path: { id },
+				headers: teamHeaders(options)
 			}));
 		},
-		async update(id, body) {
+		async update(id, body, options) {
 			return unwrapResult(await updateDiary({
 				client,
 				auth,
 				path: { id },
-				body
+				body,
+				headers: teamHeaders(options)
 			}));
 		},
-		async delete(id) {
+		async delete(id, options) {
 			return unwrapResult(await deleteDiary({
 				client,
 				auth,
-				path: { id }
+				path: { id },
+				headers: teamHeaders(options)
 			}));
 		},
 		async tags(diaryId, query) {
@@ -4981,14 +5051,14 @@ function createRuntimeProfilesNamespace(context) {
 			return unwrapResult(await listRuntimeProfiles({
 				client,
 				auth,
-				headers: teamHeaders$1(options)
+				headers: teamHeaders(options)
 			}));
 		},
 		async create(body, options) {
 			return unwrapResult(await createRuntimeProfile({
 				client,
 				auth,
-				headers: teamHeaders$1(options),
+				headers: teamHeaders(options),
 				body
 			}));
 		},
@@ -5017,8 +5087,56 @@ function createRuntimeProfilesNamespace(context) {
 		}
 	};
 }
-function teamHeaders$1(options) {
-	return options?.teamId ? { "x-moltnet-team-id": options.teamId } : void 0;
+//#endregion
+//#region ../sdk/src/namespaces/runtime-sessions.ts
+function createRuntimeSessionsNamespace(context) {
+	const { client, auth } = context;
+	return {
+		async getForAttempt(path, options) {
+			try {
+				return unwrapResult(await getRuntimeSession({
+					client,
+					auth,
+					headers: requiredTeamHeaders(options),
+					path
+				}));
+			} catch (err) {
+				if (err instanceof MoltNetError && err.statusCode === 404) return null;
+				throw err;
+			}
+		},
+		async upload(path, body, query, options) {
+			return unwrapResult(await uploadRuntimeSession({
+				auth,
+				body,
+				client,
+				duplex: "half",
+				headers: {
+					...requiredTeamHeaders(options),
+					"content-type": "application/octet-stream"
+				},
+				path,
+				query
+			}));
+		},
+		async download(path, options) {
+			const stream = unwrapResult(await client.request({
+				auth,
+				headers: requiredTeamHeaders(options),
+				method: "GET",
+				parseAs: "stream",
+				path,
+				security: [{
+					scheme: "bearer",
+					type: "http"
+				}],
+				url: "/runtime-sessions/{taskId}/{attemptN}/content"
+			}));
+			if (stream instanceof Readable) return stream;
+			if (stream instanceof ReadableStream) return Readable.fromWeb(stream);
+			throw new MoltNetError("Unexpected runtime session download response stream", { code: "INVALID_RESPONSE" });
+		}
+	};
 }
 //#endregion
 //#region ../sdk/src/namespaces/runtime-slots.ts
@@ -5029,7 +5147,7 @@ function createRuntimeSlotsNamespace(context) {
 			return unwrapResult(await beginRuntimeSlot({
 				client,
 				auth,
-				headers: teamHeaders(options),
+				headers: requiredTeamHeaders(options),
 				body
 			}));
 		},
@@ -5037,7 +5155,7 @@ function createRuntimeSlotsNamespace(context) {
 			return unwrapResult(await finishRuntimeSlot({
 				client,
 				auth,
-				headers: teamHeaders(options),
+				headers: requiredTeamHeaders(options),
 				body
 			}));
 		},
@@ -5046,7 +5164,7 @@ function createRuntimeSlotsNamespace(context) {
 				return unwrapResult(await findLatestRuntimeSlotForAttempt({
 					client,
 					auth,
-					headers: teamHeaders(options),
+					headers: requiredTeamHeaders(options),
 					query
 				}));
 			} catch (err) {
@@ -5056,9 +5174,6 @@ function createRuntimeSlotsNamespace(context) {
 		}
 	};
 }
-function teamHeaders(options) {
-	return { "x-moltnet-team-id": options.teamId };
-}
 //#endregion
 //#region ../sdk/src/namespaces/signing-requests.ts
 function createSigningRequestsNamespace(context) {
@@ -9395,6 +9510,16 @@ var RuntimeProfileToolName = String$1({
 	maxLength: 128,
 	pattern: "^[a-zA-Z0-9._/-]+$"
 });
+var RuntimeProfileWorkspaceMode = Union([
+	Literal("none"),
+	Literal("shared_mount"),
+	Literal("dedicated_worktree")
+]);
+var RuntimeProfileAllowedWorkspaceModes = _Array_(RuntimeProfileWorkspaceMode, {
+	minItems: 1,
+	maxItems: 3,
+	uniqueItems: true
+});
 var SandboxResumeCommandWhenSchema = _Object_({ workspaceMode: Optional(_Array_(Union([
 	Literal("shared_mount"),
 	Literal("dedicated_worktree"),
@@ -9498,6 +9623,14 @@ var RuntimeProfileMaxBatchSize = Integer({
 	minimum: 1,
 	maximum: 1e3
 });
+var RuntimeProfileMaxTurns = Integer({
+	minimum: 0,
+	maximum: 1e4
+});
+var RuntimeProfileMaxBashTimeouts = Integer({
+	minimum: 0,
+	maximum: 1e3
+});
 _Object_({
 	id: String$1({ format: "uuid" }),
 	teamId: String$1({ format: "uuid" }),
@@ -9515,6 +9648,8 @@ _Object_({
 	sandbox: RuntimeProfileSandbox,
 	sessionStorageMode: Literal("local"),
 	workspaceStorageMode: Literal("local"),
+	defaultWorkspaceMode: Union([RuntimeProfileWorkspaceMode, Null()]),
+	allowedWorkspaceModes: RuntimeProfileAllowedWorkspaceModes,
 	sessionTtlSec: Integer({
 		minimum: 1,
 		maximum: 86400
@@ -9526,6 +9661,8 @@ _Object_({
 	leaseTtlSec: RuntimeProfileLeaseTtlSec,
 	heartbeatIntervalMs: RuntimeProfileHeartbeatIntervalMs,
 	maxBatchSize: RuntimeProfileMaxBatchSize,
+	maxTurns: RuntimeProfileMaxTurns,
+	maxBashTimeouts: RuntimeProfileMaxBashTimeouts,
 	requiredEnv: _Array_(RuntimeProfileEnvName, { maxItems: 100 }),
 	requiredTools: _Array_(RuntimeProfileToolName, { maxItems: 100 }),
 	context: _Array_(RuntimeProfileContext, { maxItems: 5 }),
@@ -9543,6 +9680,64 @@ _Object_({
 	additionalProperties: false
 });
 //#endregion
+//#region ../tasks/src/runtime-sessions.ts
+var RuntimeSessionKind = Union([
+	Literal("root"),
+	Literal("extend"),
+	Literal("fork")
+]);
+var RuntimeSessionCheckpointKind = Union([Literal("attempt_final")]);
+_Object_({
+	id: String$1({ format: "uuid" }),
+	teamId: String$1({ format: "uuid" }),
+	taskId: String$1({ format: "uuid" }),
+	attemptN: Integer({ minimum: 1 }),
+	sourceSlotId: Union([String$1({ format: "uuid" }), Null()]),
+	sourceRuntimeProfileId: Union([String$1({ format: "uuid" }), Null()]),
+	sessionKind: RuntimeSessionKind,
+	parentSessionId: Union([String$1({ format: "uuid" }), Null()]),
+	contentType: String$1({
+		minLength: 1,
+		maxLength: 200
+	}),
+	contentEncoding: Union([String$1({
+		minLength: 1,
+		maxLength: 100
+	}), Null()]),
+	sizeBytes: Integer({ minimum: 0 }),
+	sha256: String$1({
+		minLength: 64,
+		maxLength: 64
+	}),
+	storageClass: String$1({
+		minLength: 1,
+		maxLength: 100
+	}),
+	checkpointKind: RuntimeSessionCheckpointKind,
+	uploadedAt: String$1({ format: "date-time" })
+}, { $id: "RuntimeSession" });
+_Object_({
+	sourceSlotId: Optional(String$1({ format: "uuid" })),
+	sourceRuntimeProfileId: Optional(String$1({ format: "uuid" })),
+	sessionKind: RuntimeSessionKind,
+	parentSessionId: Optional(String$1({ format: "uuid" }))
+}, {
+	$id: "UploadRuntimeSessionQuery",
+	additionalProperties: false
+});
+String$1({
+	$id: "RuntimeSessionContent",
+	description: "Runtime session content stream.",
+	format: "binary"
+});
+_Object_({
+	taskId: String$1({ format: "uuid" }),
+	attemptN: Integer({ minimum: 1 })
+}, {
+	$id: "RuntimeSessionAttemptParams",
+	additionalProperties: false
+});
+//#endregion
 //#region ../tasks/src/runtime-slots.ts
 var RuntimeWorkspaceKind = Union([
 	Literal("origin"),
@@ -13782,6 +13977,7 @@ var TaskBuilder = class {
 	inputData;
 	refs = [];
 	body = {};
+	teamIdValue;
 	constructor(taskType, input) {
 		this.taskType = taskType;
 		this.inputData = { ...input };
@@ -13920,7 +14116,7 @@ var TaskBuilder = class {
 	* @returns This builder, for chaining.
 	*/
 	team(teamId) {
-		this.body.teamId = teamId;
+		this.teamIdValue = teamId;
 		return this;
 	}
 	/**
@@ -14031,16 +14227,17 @@ var TaskBuilder = class {
 	* generated `correlationId` when omitted, so the persisted top-level body may
 	* gain that one field.
 	*
-	* @returns A validated `CreateTaskData['body']`.
+	* @returns A {@link BuiltTask}: the validated body plus the team context
+	*   (which travels as the `x-moltnet-team-id` header, not the body).
 	* @throws {TaskBuildError} when required fields are missing or the payload
 	*   fails the shared `@moltnet/tasks` validation, with field-level detail.
 	* @example
-	* const body = buildFreeform({ brief }).team(t).diary(d).build();
-	* await agent.tasks.create(body);
+	* const built = buildFreeform({ brief }).team(t).diary(d).build();
+	* await agent.tasks.create(built);
 	*/
 	build() {
 		const missing = [];
-		if (!this.body.teamId) missing.push({
+		if (!this.teamIdValue) missing.push({
 			field: "teamId",
 			message: "teamId is required"
 		});
@@ -14058,12 +14255,14 @@ var TaskBuilder = class {
 		const all = [...missing, ...validationErrors];
 		if (all.length > 0) throw new TaskBuildError(all);
 		return {
-			...this.body,
-			taskType: this.taskType,
-			input: normalizedInput,
-			teamId: this.body.teamId,
-			diaryId: this.body.diaryId,
-			...references ? { references } : {}
+			body: {
+				...this.body,
+				taskType: this.taskType,
+				input: normalizedInput,
+				diaryId: this.body.diaryId,
+				...references ? { references } : {}
+			},
+			teamId: this.teamIdValue
 		};
 	}
 };
@@ -14312,18 +14511,24 @@ function createTasksNamespace(context) {
 				auth
 			}));
 		},
-		async list(query) {
+		async list(query, options) {
 			return unwrapResult(await listTasks({
 				client,
 				auth,
-				query
+				query,
+				headers: requiredTeamHeaders(options)
 			}));
 		},
-		async create(body) {
+		async create(bodyOrBuilt, options) {
+			const { body, teamId } = options !== void 0 ? {
+				body: bodyOrBuilt,
+				teamId: options.teamId
+			} : bodyOrBuilt;
 			return unwrapResult(await createTask({
 				client,
 				auth,
-				body
+				body,
+				headers: requiredTeamHeaders({ teamId })
 			}));
 		},
 		buildTask,
@@ -14621,6 +14826,7 @@ function createAgent(options) {
 		runtimeProfiles: createRuntimeProfilesNamespace(context),
 		tasks: createTasksNamespace(context),
 		runtimeSlots: createRuntimeSlotsNamespace(context),
+		runtimeSessions: createRuntimeSessionsNamespace(context),
 		client,
 		getToken: () => tokenManager.getToken()
 	};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/pi-extension",
-  "version": "0.26.5",
+  "version": "0.27.1",
   "type": "module",
   "description": "MoltNet pi extension — sandboxed tool execution in Gondolin VMs with MoltNet identity and persistent memory",
   "keywords": [
@@ -36,8 +36,8 @@
     "@earendil-works/gondolin": "^0.9.1",
     "@opentelemetry/api": "^1.9.0",
     "typebox": "^1.2.8",
-    "@themoltnet/agent-runtime": "0.28.2",
-    "@themoltnet/sdk": "0.111.0"
+    "@themoltnet/sdk": "0.113.0",
+    "@themoltnet/agent-runtime": "0.30.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": ">=0.74.0",