@themoltnet/pi-extension 0.29.0 → 0.30.0

package/dist/index.d.ts

@@ -6,6 +6,7 @@ import { EditOperations } from '@earendil-works/pi-coding-agent';
 import { ExtensionAPI } from '@earendil-works/pi-coding-agent';
 import { LoadSkillsResult } from '@earendil-works/pi-coding-agent';
 import { Model } from '@earendil-works/pi-ai';
+import { Readable } from 'node:stream';
 import { ReadOperations } from '@earendil-works/pi-coding-agent';
 import { Skill } from '@earendil-works/pi-coding-agent';
 import { Static } from 'typebox';
@@ -294,6 +295,8 @@ export declare interface ExecutePiTaskOptions {
     extraAllowedHosts?: string[];
     /** Sandbox overrides (env, VFS shadows, resources). */
     sandboxConfig?: SandboxConfig;
+    /** Host environment variable names to forward into the Pi VM. */
+    forwardEnv?: string[];
     /**
      * Forwarded to `buildTaskUserPrompt` for per-type builders. Static
      * across tasks. Today no built-in builder needs per-task `extras` —
@@ -481,6 +484,17 @@ declare interface MoltNetToolsConfig {
     clearSessionErrors(): void;
     /** Host working directory for host-exec commands (worktree path or cwd). */
     getHostCwd?(): string;
+    /**
+     * Optional workspace-file reader. Daemon/Gondolin callers provide this so
+     * artifact uploads see guest overlay writes that may not exist on the host
+     * mount path yet.
+     */
+    openWorkspaceFileForRead?(filePath: string): Promise<{
+        stream: Readable;
+        isFile: boolean;
+        sizeBytes?: number;
+        displayPath?: string;
+    }>;
     /**
      * Set of process.env keys that are safe to forward to host-exec child
      * processes. Configured at sandbox startup so the caller can include
@@ -972,6 +986,14 @@ export declare interface VmConfig {
     extraAllowedHosts?: string[];
     /** Full sandbox config (vfs shadows, env overrides). */
     sandboxConfig?: SandboxConfig;
+    /**
+     * Host environment variable names to copy into the VM process.
+     *
+     * Runtime profiles use this for provider API keys: `requiredEnv` proves the
+     * daemon host has the secret, and this allowlist forwards only those names
+     * into the guest without storing secret values in the profile.
+     */
+    forwardEnv?: string[];
     /** Abort resume/setup work, closing any live VM owned by resumeVm. */
     signal?: AbortSignal;
 }

package/dist/index.js

@@ -1,7 +1,7 @@
 import { createRequire } from "node:module";
 import { execFileSync } from "node:child_process";
 import { cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, statSync } from "node:fs";
-import path, { join, relative, sep } from "node:path";
+import path, { isAbsolute, join, relative, resolve, sep } from "node:path";
 import { DEFAULT_MAX_BYTES, DefaultResourceLoader, SessionManager, createAgentSession, createBashTool, createBashToolDefinition, createEditTool, createEditToolDefinition, createFindTool, createFindToolDefinition, createGrepTool, createGrepToolDefinition, createLsTool, createLsToolDefinition, createReadTool, createReadToolDefinition, createSyntheticSourceInfo, createWriteTool, createWriteToolDefinition, defineTool, formatSize, parseFrontmatter, truncateHead, truncateLine } from "@earendil-works/pi-coding-agent";
 import { createHash } from "node:crypto";
 import { Readable } from "node:stream";
@@ -2874,6 +2874,15 @@ function unwrapResult(result) {
 			networkError.stack = error.stack;
 			throw networkError;
 		}
+		const responseSummary = summarizeResponse(result.response);
+		if (responseSummary) {
+			const detail = stringifyUnknown(error);
+			throw new MoltNetError(`MoltNet API request failed with HTTP ${responseSummary.status} ${responseSummary.statusText}: ${detail}`, {
+				code: `HTTP_${responseSummary.status}`,
+				detail,
+				statusCode: responseSummary.status
+			});
+		}
 		throw new MoltNetError(`Unexpected error from MoltNet API: ${stringifyUnknown(error)}`, { code: "UNKNOWN" });
 	}
 	if (result.data === void 0) throw new MoltNetError("Unexpected empty response from MoltNet API", { code: "EMPTY_RESPONSE" });
@@ -2891,6 +2900,15 @@ function stringifyUnknown(value) {
 		return String(value);
 	}
 }
+function summarizeResponse(response) {
+	if (!response || typeof response !== "object") return null;
+	const candidate = response;
+	if (typeof candidate.status !== "number") return null;
+	return {
+		status: candidate.status,
+		statusText: typeof candidate.statusText === "string" && candidate.statusText ? candidate.statusText : "Error"
+	};
+}
 function unwrapRequired(result, message, code) {
 	if (result.error || !result.data) throw new MoltNetError(message, { code });
 	return result.data;
@@ -17542,11 +17560,34 @@ function shouldAutoApproveHostExec(params, config) {
 }
 async function resolveWorkspaceFilePath(cwd, filePath) {
 	const resolved = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(cwd, filePath);
-	const [realCwd, realResolved] = await Promise.all([realpath(cwd), realpath(resolved)]);
+	const realCwd = await realpath(cwd);
+	let realResolved;
+	try {
+		realResolved = await realpath(resolved);
+	} catch (err) {
+		if (err && typeof err === "object" && "code" in err && err.code === "ENOENT") throw new Error(`task artifact input path does not exist: ${filePath}. Write the file before calling moltnet_upload_task_artifact.`);
+		throw err;
+	}
 	const rel = path.relative(realCwd, realResolved);
 	if (rel === "" || rel.startsWith("..") || path.isAbsolute(rel)) throw new Error(`task artifact path escapes workspace: ${filePath}`);
 	return realResolved;
 }
+async function openWorkspaceArtifactInput(config, cwd, filePath) {
+	if (config.openWorkspaceFileForRead) try {
+		return await config.openWorkspaceFileForRead(filePath);
+	} catch (err) {
+		if (err && typeof err === "object" && "code" in err && err.code === "ENOENT") throw new Error(`task artifact input path does not exist: ${filePath}. Write the file before calling moltnet_upload_task_artifact.`);
+		throw err;
+	}
+	const resolved = await resolveWorkspaceFilePath(cwd, filePath);
+	const info = await stat(resolved);
+	return {
+		stream: createReadStream(resolved),
+		isFile: info.isFile(),
+		sizeBytes: info.size,
+		displayPath: path.relative(cwd, resolved)
+	};
+}
 async function resolveWorkspaceOutputPath(cwd, filePath) {
 	const resolved = path.isAbsolute(filePath) ? path.resolve(filePath) : path.resolve(cwd, filePath);
 	const [realCwd, realParent] = await Promise.all([realpath(cwd), realpath(path.dirname(resolved))]);
@@ -18054,14 +18095,12 @@ function createMoltNetTools(config) {
 			if (!teamId) throw new Error("moltnet_upload_task_artifact requires a team context");
 			const taskCtx = config.getTaskContext?.() ?? null;
 			if (!taskCtx) throw new Error("moltnet_upload_task_artifact is only available during an active task attempt");
-			const cwd = config.getHostCwd?.() ?? process.cwd();
-			const resolved = await resolveWorkspaceFilePath(cwd, params.filePath);
-			const info = await stat(resolved);
-			if (!info.isFile()) throw new Error(`task artifact path is not a file: ${params.filePath}`);
+			const input = await openWorkspaceArtifactInput(config, config.getHostCwd?.() ?? process.cwd(), params.filePath);
+			if (!input.isFile) throw new Error(`task artifact path is not a file: ${params.filePath}`);
 			const artifact = await agent.tasks.artifacts.upload({
 				taskId: taskCtx.taskId,
 				attemptN: taskCtx.attemptN
-			}, createReadStream(resolved), {
+			}, input.stream, {
 				kind: params.kind,
 				title: params.title,
 				contentType: params.contentType ?? "application/octet-stream",
@@ -18072,8 +18111,8 @@ function createMoltNetTools(config) {
 					type: "text",
 					text: JSON.stringify({
 						...artifact,
-						filePath: path.relative(cwd, resolved),
-						localSizeBytes: info.size
+						filePath: input.displayPath ?? params.filePath,
+						localSizeBytes: input.sizeBytes ?? null
 					}, null, 2)
 				}],
 				details: {}
@@ -18657,13 +18696,13 @@ async function delay(ms, signal, label) {
 //#endregion
 //#region src/vm-manager.ts
 /**
-* Memory-backed VFS mount used by the daemon to inject task-context
-* skills (#943 slice 1.5). This is a separate top-level mount because
-* Gondolin mounts can't nest. The agent's Gondolin-bound Read tool accepts
-* paths under this prefix (see toGuestPath in tool-operations.ts).
+* Memory-backed VFS mount used by the daemon to inject task context
+* (#943 slice 1.5). This is a separate top-level mount because Gondolin
+* mounts can't nest. The agent's Gondolin-bound Read tool accepts paths
+* under this prefix (see toGuestPath in tool-operations.ts).
 *
 * Why MemoryProvider rather than a path under the workspace mount:
-*   - Injected skills are ephemeral by intent: per-task-attempt input
+*   - Injected task context is ephemeral by intent: per-task-attempt input
 *     scoped to the VM lifetime. MemoryProvider models that exactly —
 *     in-memory, per-VM-instance, zero host artefacts, automatic
 *     cleanup on VM close.
@@ -18676,7 +18715,7 @@ async function delay(ms, signal, label) {
 *     and episodic 7affbfeb-18a2-4963-aeac-c177eb2afa2d for the full
 *     investigation and the alternatives we rejected.
 */
-var GUEST_TASK_SKILLS_MOUNT = "/moltnet-task-skills";
+var GUEST_TASK_CONTEXT_MOUNT = "/moltnet-task-context";
 function shouldRunResumeCommand(entry, ctx) {
 	if (typeof entry === "string") return true;
 	const workspaceModes = entry.when?.workspaceMode;
@@ -18840,10 +18879,17 @@ async function resumeVm(config) {
 			writeMode: vfsConfig.shadowMode ?? "tmpfs"
 		});
 	}
+	const forwardedEnv = {};
+	for (const name of config.forwardEnv ?? []) {
+		const value = process.env[name];
+		if (value === void 0 || value === "") continue;
+		forwardedEnv[name] = value;
+	}
 	const envOverrides = config.sandboxConfig?.env ?? {};
 	const vmEnv = {
 		...secretEnv,
 		...vmAgentEnv,
+		...forwardedEnv,
 		PATH: "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/lib/go/bin",
 		HOME: "/home/agent",
 		NODE_NO_WARNINGS: "1",
@@ -18861,7 +18907,7 @@ async function resumeVm(config) {
 			...resources?.cpus && { cpus: resources.cpus },
 			vfs: { mounts: {
 				[guestWorkspace]: workspaceProvider,
-				[GUEST_TASK_SKILLS_MOUNT]: new MemoryProvider()
+				[GUEST_TASK_CONTEXT_MOUNT]: new MemoryProvider()
 			} }
 		}),
 		signal: config.signal,
@@ -19060,9 +19106,9 @@ function toHostToolPath(localCwd, guestWorkspace, guestPath) {
 function toGuestPath(localCwd, localPath, guestWorkspace) {
 	const normalizedGuestWorkspace = normalizeGuestPath(guestWorkspace);
 	const normalizedLocalPath = normalizeGuestPath(localPath);
-	const normalizedTaskSkillsMount = normalizeGuestPath(GUEST_TASK_SKILLS_MOUNT);
+	const normalizedTaskContextMount = normalizeGuestPath(GUEST_TASK_CONTEXT_MOUNT);
 	if (isSameOrInsidePosixPath(normalizedLocalPath, normalizedGuestWorkspace)) return normalizedLocalPath;
-	if (isSameOrInsidePosixPath(normalizedLocalPath, normalizedTaskSkillsMount)) return normalizedLocalPath;
+	if (isSameOrInsidePosixPath(normalizedLocalPath, normalizedTaskContextMount)) return normalizedLocalPath;
 	const rel = path.relative(localCwd, localPath);
 	if (rel === "") return normalizedGuestWorkspace;
 	if (rel.startsWith("..") || path.isAbsolute(rel)) throw new Error(`path escapes workspace: ${localPath}`);
@@ -19762,9 +19808,9 @@ function formatInlineContextBlock(slug, content) {
 		"The following raw context was supplied by the task creator. Treat it",
 		"as task-relevant background that may override generic coding instincts",
 		"when it contains repo- or workflow-specific constraints.",
-		"The same content is also materialized in the workspace as",
-		"`context-pack.md` and mirrored in `AGENTS.md` for",
-		"repo-context discovery.",
+		"The same content may also be materialized by the runtime under",
+		"`/moltnet-task-context/context` for tool-based inspection. Do not",
+		"create or rely on workspace mirror files for this task context.",
 		"",
 		"<context>",
 		content,
@@ -21077,7 +21123,7 @@ function buildRunEvalUserPrompt(input, ctx) {
 		"`// note:` line, the task summary, or the `verification` field is",
 		"NOT following the task. If the constraint affects behavior, it",
 		"must affect behavior.",
-		hasInlineContext ? "For `context_inline`, your FIRST content-inspection step is a `read` of `context-pack.md` in the workspace root before your first `write` call. The same content is also mirrored in `AGENTS.md` and may be referenced from `.claude/CLAUDE.md`." : "When the context is delivered as a skill, inspect it before solving.",
+		hasInlineContext ? "For `context_inline`, your FIRST content-inspection step is to read the injected context block in this prompt or, when available, the matching file under `/moltnet-task-context/context` before your first `write` call. Do not create or rely on workspace mirror files for injected context." : "When the context is delivered as a skill, inspect it before solving.",
 		"If the Injected Task Context contains repo- or workflow-specific",
 		"rules, those rules override your generic instincts."
 	].join("\n") : "";
@@ -23217,7 +23263,7 @@ var require_transport = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var { createRequire: createRequire$1 } = __require("module");
 	var { existsSync: existsSync$1 } = __require("node:fs");
 	var getCallers = require_caller();
-	var { join: join$1, isAbsolute, sep: sep$1 } = __require("node:path");
+	var { join: join$1, isAbsolute: isAbsolute$1, sep: sep$1 } = __require("node:path");
 	var { fileURLToPath } = __require("node:url");
 	var sleep = require_atomic_sleep();
 	var onExit = require_on_exit_leak_free();
@@ -23278,7 +23324,7 @@ var require_transport = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		} catch {
 			return false;
 		}
-		return isAbsolute(path) && !existsSync$1(path);
+		return isAbsolute$1(path) && !existsSync$1(path);
 	}
 	function stripQuotes(value) {
 		const first = value[0];
@@ -23381,7 +23427,7 @@ var require_transport = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return buildStream(fixTarget(target), options, worker, sync, name);
 		function fixTarget(origin) {
 			origin = bundlerOverrides[origin] || origin;
-			if (isAbsolute(origin) || origin.indexOf("file://") === 0) return origin;
+			if (isAbsolute$1(origin) || origin.indexOf("file://") === 0) return origin;
 			if (origin === "pino/file") return join$1(__dirname, "..", "file.js");
 			let fixTarget;
 			for (const filePath of callers) try {
@@ -24732,20 +24778,21 @@ var require_multistream = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 *      system prompt; the agent fetches the body on demand via the
 *      Read tool.
 *
-* Skill files are written into a memory-backed VM mount. pi only reads
-* `<available_skills>` metadata (name, description, location), never the file
+* Task-context files are written into a memory-backed VM mount. pi only reads
+* `<available_skills>` metadata (name, description, location), never the skill
 * body, so we construct synthetic `Skill` objects pointing at the in-VM path
 * without ever materialising the file on the host.
 */
 /**
-* Where in the VM we write skill bodies — the memory-backed mount
+* Where in the VM we write task-context bodies — the memory-backed mount
 * declared in `vm-manager.ts`. See the comment on
-* `GUEST_TASK_SKILLS_MOUNT` there for the full rationale (ephemeral
-* by intent + the worktree symlink interaction with Gondolin's
-* sandbox-escape protection). The agent's Gondolin Read tool accepts
-* paths under this mount via `toGuestPath` in `tool-operations.ts`.
+* `GUEST_TASK_CONTEXT_MOUNT` there for the full rationale (ephemeral by
+* intent + the worktree symlink interaction with Gondolin's sandbox-escape
+* protection). The agent's Gondolin Read tool accepts paths under this mount
+* via `toGuestPath` in `tool-operations.ts`.
 */
-var SKILL_ROOT_IN_VM = GUEST_TASK_SKILLS_MOUNT;
+var SKILL_ROOT_IN_VM = `${GUEST_TASK_CONTEXT_MOUNT}/skills`;
+var INLINE_CONTEXT_ROOT_IN_VM = `${GUEST_TASK_CONTEXT_MOUNT}/context`;
 /** Bounds borrowed from pi's skill validation; conservative caps so a
 *  malformed SKILL.md doesn't bloat the system prompt. */
 var MAX_SKILL_NAME = 64;
@@ -24756,13 +24803,7 @@ var MAX_SKILL_DESCRIPTION = 1024;
 */
 async function injectTaskContext(args) {
 	const skills = [];
-	const inlineContexts = [];
-	const { guestWorkspace } = args;
-	const inlineContextRoot = `${guestWorkspace}/.moltnet/context`;
-	const workspaceContextPack = `${guestWorkspace}/context-pack.md`;
-	const workspaceAgentsMd = `${guestWorkspace}/AGENTS.md`;
-	const workspaceClaudeDir = `${guestWorkspace}/.claude`;
-	const workspaceClaudeMd = `${workspaceClaudeDir}/CLAUDE.md`;
+	args.guestWorkspace;
 	const resolved = await resolveTaskContext({
 		context: args.context,
 		deliver: {
@@ -24779,23 +24820,12 @@ async function injectTaskContext(args) {
 				}));
 			},
 			contextFile: async ({ suggestedFileName, content }) => {
-				await args.fs.mkdir(inlineContextRoot, { recursive: true });
-				const filePath = `${inlineContextRoot}/${suggestedFileName}`;
+				await args.fs.mkdir(INLINE_CONTEXT_ROOT_IN_VM, { recursive: true });
+				const filePath = `${INLINE_CONTEXT_ROOT_IN_VM}/${suggestedFileName}`;
 				await args.fs.writeFile(filePath, content, { mode: 420 });
-				inlineContexts.push({
-					slug: suggestedFileName.replace(/\.md$/u, ""),
-					content
-				});
 			}
 		}
 	});
-	if (inlineContexts.length > 0) {
-		const packContent = buildWorkspaceContextPack(inlineContexts);
-		await args.fs.writeFile(workspaceContextPack, packContent, { mode: 420 });
-		await args.fs.writeFile(workspaceAgentsMd, packContent, { mode: 420 });
-		await args.fs.mkdir(workspaceClaudeDir, { recursive: true });
-		await args.fs.writeFile(workspaceClaudeMd, "@../context-pack.md\n", { mode: 420 });
-	}
 	return {
 		injected: resolved.injected,
 		skills,
@@ -24803,17 +24833,6 @@ async function injectTaskContext(args) {
 		userInlineSuffix: resolved.userInlineSuffix
 	};
 }
-function buildWorkspaceContextPack(contexts) {
-	return [
-		"# Context Pack",
-		"",
-		...contexts.map(({ slug, content }) => [
-			`## ${slug}`,
-			"",
-			content.trimEnd()
-		].join("\n"))
-	].join("\n\n").trimEnd() + "\n";
-}
 /**
 * Build a `Skill` object pi will faithfully render in
 * `<available_skills>`. We extract `name` and `description` from the
@@ -25527,6 +25546,17 @@ function shouldSkipSeedEntry(sourceEntry, entryName, resolvedTargetDir) {
 * `AgentRuntime`.
 */
 var noopTurnEventHandler = () => {};
+async function openVmWorkspaceFileForRead(config) {
+	const localPath = isAbsolute(config.filePath) ? config.filePath : resolve(config.cwdPath, config.filePath);
+	const guestPath = toGuestPath(config.cwdPath, localPath, config.guestWorkspace);
+	const info = await config.vm.fs.stat(guestPath);
+	return {
+		stream: await config.vm.fs.readFileStream(guestPath),
+		isFile: info.isFile(),
+		sizeBytes: typeof info.size === "number" ? info.size : void 0,
+		displayPath: config.filePath
+	};
+}
 function createGondolinToolDefinitions(config) {
 	const { vm, mountPath, guestWorkspace } = config;
 	const grepTool = createGrepToolDefinition(mountPath);
@@ -25703,6 +25733,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 				workspaceMode: workspace.mode,
 				extraAllowedHosts: opts.extraAllowedHosts,
 				sandboxConfig,
+				forwardEnv: opts.forwardEnv,
 				signal: reporter.cancelSignal
 			});
 		} catch (err) {
@@ -25718,9 +25749,11 @@ async function executePiTask(claimedTask, reporter, opts) {
 		const taskTeamId = task.teamId ?? "";
 		activateAgentEnv(managed.credentials.agentEnv, agentRootDir);
 		const activeWorkspace = workspace;
+		const activeManaged = managed;
 		if (!activeWorkspace) throw new Error("task workspace not prepared");
 		await emit("info", {
 			event: "execute_start",
+			correlationId: task.correlationId ?? null,
 			taskType: task.taskType,
 			teamId: task.teamId,
 			provider: opts.provider,
@@ -25773,6 +25806,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 			taskPrompt = assembled.text;
 			await emit("info", {
 				event: "prompt_assembled",
+				correlationId: task.correlationId ?? null,
 				taskType: assembled.taskType,
 				sections: assembled.trace
 			});
@@ -25804,6 +25838,7 @@ async function executePiTask(claimedTask, reporter, opts) {
 		}
 		if (injectedContext.injected.length > 0) await emit("info", {
 			event: "context_injected",
+			correlationId: task.correlationId ?? null,
 			count: injectedContext.injected.length,
 			bindings: injectedContext.injected.map((r) => r.binding),
 			slugs: injectedContext.injected.map((r) => r.slug)
@@ -25828,6 +25863,12 @@ async function executePiTask(claimedTask, reporter, opts) {
 				getSessionErrors: () => [],
 				clearSessionErrors: () => {},
 				getHostCwd: () => cwdPath,
+				openWorkspaceFileForRead: (filePath) => openVmWorkspaceFileForRead({
+					vm: activeManaged.vm,
+					cwdPath,
+					guestWorkspace: activeManaged.guestWorkspace,
+					filePath
+				}),
 				hostExecBaseEnv: new Set([...HOST_EXEC_DEFAULT_BASE_ENV, ...Object.keys(managed.credentials.agentEnv)]),
 				hostExecAutoApprove: opts.hostExecAutoApprove ?? opts.sandboxConfig?.hostExec?.autoApprove ?? false,
 				getTaskContext: () => ({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/pi-extension",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "type": "module",
   "description": "MoltNet pi extension — sandboxed tool execution in Gondolin VMs with MoltNet identity and persistent memory",
   "keywords": [
@@ -36,8 +36,8 @@
     "@earendil-works/gondolin": "^0.9.1",
     "@opentelemetry/api": "^1.9.0",
     "typebox": "^1.2.8",
-    "@themoltnet/agent-runtime": "0.32.0",
-    "@themoltnet/sdk": "0.115.0"
+    "@themoltnet/agent-runtime": "0.33.0",
+    "@themoltnet/sdk": "0.116.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": ">=0.74.0",